PT-2025-39039

Name of the Vulnerable Software and Affected Versions Smart Blocks versions through 2.4 Description A missing authorization issue exists in hashthemes Smart Blocks due to incorrectly configured access control security levels. This allows exploitation of the system. Recommendations Update Smart...

PT-2025-38799

Name of the Vulnerable Software and Affected Versions oggix Ongkoskirim.id versions through 1.0.6 Description An issue exists in oggix Ongkoskirim.id related to incorrectly configured access control security levels, allowing for missing authorization. Recommendations Update to a version beyond...

CVE-2025-58976

Missing Authorization vulnerability in Equalize Digital Accessibility Checker by Equalize Digital accessibility-checker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Checker by Equalize Digital: from n/a through = 1.31.0...

CVE-2025-58816

Missing Authorization vulnerability in Plugin Devs Product Carousel Slider for Elementor ecommerce-product-carousel-slider-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Carousel Slider for Elementor: from n/a through = 2.1.3...

CVE-2025-58813

Missing Authorization vulnerability in themearile Consultstreet consultstreet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Consultstreet: from n/a through = 3.0.0...

CVE-2025-58616

Missing Authorization vulnerability in Frisbii Frisbii Pay reepay-checkout-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frisbii Pay: from n/a through = 1.8.2.1...

CVE-2025-58617

Missing Authorization vulnerability in FAKTOR VIER F4 Media Taxonomies f4-media-taxonomies allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects F4 Media Taxonomies: from n/a through = 1.1.4...

CVE-2025-58783

Gutentor (WordPress) contains a Missing Authorization/Broken Access Control vulnerability affecting versions through 3.5.1. Root cause is incorrect access control configuration enabling unauthorized actions. Impact: potential access/control bypass. Remediation: upgrade to a fixed release (Patchst...

CVE-2025-58617

Missing Authorization vulnerability in FAKTOR VIER F4 Media Taxonomies f4-media-taxonomies allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects F4 Media Taxonomies: from n/a through = 1.1.4...

CVE-2025-58613

Missing Authorization vulnerability in Barn2 Plugins Posts Table with Search & Sort posts-data-table allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Posts Table with Search & Sort: from n/a through = 1.4.10...

CVE-2025-58601

Missing Authorization vulnerability in RadiusTheme Classified Listing classified-listing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Classified Listing: from n/a through = 5.0.6...

CVE-2025-58600 WordPress Paid Member Subscriptions Plugin <= 2.15.9 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Member Subscriptions: from n/a through = 2.15.9...

CVE-2025-58597

Summary of CVE-2025-58597 : Affected product is wpForo Forum. Root cause: authorization bypass via a user-controlled key due to incorrectly configured access control security levels. Impact, per provided details: unauthorized access may be possible through such a key, affecting versions wpForo Fo...

CVE-2025-3701 WordPress Malcure Malware Scanner plugin <= 16.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Malcure Web Security Malcure Malware Scanner wp-malware-removal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Malcure Malware Scanner: from n/a through = 16.8...

CVE-2025-58210

Missing Authorization vulnerability in ThemeMove Makeaholic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Makeaholic: from n/a through 1.8.5...

PT-2025-35750

Name of the Vulnerable Software and Affected Versions: Frisbii Pay versions through 1.8.2.1 Description: A missing authorization issue exists in Frisbii Pay, allowing exploitation due to incorrectly configured access control security levels. Recommendations: At the moment, there is no information...

PT-2025-35729

Name of the Vulnerable Software and Affected Versions: Brizy versions through 2.7.12 Description: Brizy suffers from a missing authorization issue, allowing exploitation of incorrectly configured access control security levels. Recommendations: Update Brizy to a version later than 2.7.12...

PT-2025-35767

Name of the Vulnerable Software and Affected Versions: Ali Khallad Contact Form By Mega Forms versions through 1.6.1 Description: The software contains a missing authorization flaw due to incorrectly configured access control security levels. Recommendations: Update Ali Khallad Contact Form By Me...

PT-2025-35735

Name of the Vulnerable Software and Affected Versions: RadiusTheme Classified Listing versions n/a through 5.0.6 Description: A missing authorization flaw exists in RadiusTheme Classified Listing due to incorrectly configured access control security levels. Recommendations: Update RadiusTheme...

PT-2025-35697

Name of the Vulnerable Software and Affected Versions Makeaholic versions through 1.8.5 Description The software contains a missing authorization flaw due to incorrectly configured access control security levels. Recommendations Update Makeaholic to a version later than 1.8.5...