PT-2025-35729

Name of the Vulnerable Software and Affected Versions: Brizy versions through 2.7.12 Description: Brizy suffers from a missing authorization issue, allowing exploitation of incorrectly configured access control security levels. Recommendations: Update Brizy to a version later than 2.7.12...

PT-2025-35697

Name of the Vulnerable Software and Affected Versions Makeaholic versions through 1.8.5 Description The software contains a missing authorization flaw due to incorrectly configured access control security levels. Recommendations Update Makeaholic to a version later than 1.8.5...

CVE-2025-54734

Missing Authorization vulnerability in bPlugins B Slider b-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects B Slider: from n/a through = 1.1.30...

CVE-2025-54734

Missing Authorization vulnerability in bPlugins B Slider b-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects B Slider: from n/a through = 1.1.30...

CVE-2025-53230

Missing Authorization vulnerability in honzat Page Manager for Elementor page-manager-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Page Manager for Elementor: from n/a through = 2.0.5...

CVE-2025-49402

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in scriptsbundle Exertio Framework exertio-framework allows Blind SQL Injection.This issue affects Exertio Framework: from n/a through = 1.3.3...

CVE-2025-53230

CVE-2025-53230 affects WordPress Page Manager for Elementor (plugin)

PT-2025-35069

Name of the Vulnerable Software and Affected Versions: Zephyr Project Manager versions through 3.3.201 Description: A missing authorization flaw exists in Dylan James Zephyr Project Manager, allowing exploitation of incorrectly configured access control security levels. Recommendations: At the...

PT-2025-35059

Name of the Vulnerable Software and Affected Versions: LifePress versions through 2.1.3 Description: A missing authorization issue exists in LifePress due to incorrectly configured access control security levels. This allows for potential exploitation. Recommendations: Update LifePress to a versi...

PT-2025-35076

Name of the Vulnerable Software and Affected Versions: bPlugins B Slider versions through 1.1.30 Description: The software contains a missing authorization issue that allows exploiting incorrectly configured access control security levels. Recommendations: At the moment, there is no information...

CVE-2025-58198

Missing Authorization vulnerability in Xpro Xpro Theme Builder xpro-theme-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Xpro Theme Builder: from n/a through = 1.2.9...

CVE-2025-48108

Missing Authorization vulnerability in Mojoomla School Management allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects School Management: from n/a through 93.2.0...

CVE-2025-57894

Missing Authorization vulnerability in ollybach WPPizza wppizza allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPPizza: from n/a through = 3.19.8...

CVE-2025-57896

Missing Authorization vulnerability in andymoyle Church Admin church-admin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Church Admin: from n/a through = 5.0.26...

PT-2025-33938 · WordPress · Themify Builder

Name of the Vulnerable Software and Affected Versions: Themify Builder versions through 7.6.7 Description: A missing authorization issue exists in Themify Builder, allowing exploitation of incorrectly configured access control security levels. Recommendations: Update Themify Builder to a version...

CVE-2025-54717

Missing Authorization vulnerability in e-plugins WP Membership wp-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Membership: from n/a through = 1.6.3...

CVE-2025-54717

Missing Authorization vulnerability in e-plugins WP Membership wp-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Membership: from n/a through = 1.6.3...

CVE-2025-53221

Missing Authorization vulnerability in codeablepress CodeablePress codeablepress-simple-frontend-profile-picture-upload allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CodeablePress: from n/a through = 1.0.2...

CVE-2025-50029

Missing Authorization vulnerability in Ashish AI Tools artificial-intelligence-auto-content-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Tools: from n/a through = 4.0.7...

CVE-2025-31425

Missing Authorization vulnerability in kamleshyadav WP Lead Capturing Pages leadcapture allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Lead Capturing Pages: from n/a through 2.6...