CVE-2025-32295

Missing Authorization vulnerability in wordpresschef Salon Booking Pro salon-booking-plugin-pro-cc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Salon Booking Pro: from n/a through = 10.10.2...

CVE-2025-32180

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojofywp Product Carousel For WooCommerce – WoorouSell woorousell allows Stored XSS.This issue affects Product Carousel For WooCommerce – WoorouSell: from n/a through = 1.1.0...

CVE-2025-31066

Missing Authorization vulnerability in themeton Acerola acerola allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Acerola: from n/a through = 1.6.5...

CVE-2025-31063

CVE-2025-31063 (WordPress Wishlist) is a Missing Authorization vulnerability affecting Wishlist versions 2.1.0 and earlier. The issue stems from incorrectly configured access control, enabling unauthorized access to certain actions. The connected documents confirm the affected software (Wishlist)...

CVE-2025-31066 WordPress Acerola theme <= 1.6.5 - Broken Access Control Vulnerability

Missing Authorization vulnerability in themeton Acerola acerola allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Acerola: from n/a through = 1.6.5...

CVE-2025-31630

CVE-2025-31630 pertains to the WordPress theme The Business (versions up to 1.6.1). The vulnerability is described as Missing Authorization, arising from incorrectly configured access control security levels. Public-facing details in connected documents indicate impact is limited to unauthenticat...

CVE-2025-32295 WordPress Salon Booking Wordpress plugin <= 10.10.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in wordpresschef Salon Booking Pro allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Salon Booking Pro: from n/a through 10.10.2...

CVE-2025-32296

CVE-2025-32296 affects WordPress plugin Simple Link Directory Pro

CVE-2025-32296 WordPress Simple Link Directory Pro plugin < 14.8.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in quantumcloud Simple Link Directory qc-simple-link-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Link Directory: from n/a through 14.8.1...

CVE-2025-39482 WordPress Eventer - WordPress Event & Booking Manager Plugin plugin < 3.11.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in imithemes Eventer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Eventer: from n/a before 3.11.4...

CVE-2025-39511

CVE-2025-39511 refers to a Missing Authorization / Broken Access Control vulnerability in the WordPress plugin Pinterest Automatic Pin (ValvePress). Affected versions are reported as n/a through 4.18.2. The underlying issue is misconfigured access controls that could allow unauthorized access or ...

CVE-2025-47556

CVE-2025-47556 (WordPress CSS3 Compare Pricing Tables, by QuanticaLabs) A: A missing/weak authorization vulnerability in the CSS3 Compare Pricing Tables plugin for WordPress affects versions n/a through 11.5, enabling exploitation of incorrectly configured access control (broken access control). ...

CVE-2025-47534 WordPress Wordpress Auto Spinner <= 3.25.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in ValvePress Wordpress Auto Spinner allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Wordpress Auto Spinner: from n/a through 3.25.0...

CVE-2025-47556 WordPress CSS3 Compare Pricing Tables for WordPress plugin <= 11.6 - Broken Access Control Vulnerability

Missing Authorization vulnerability in QuanticaLabs CSS3 Compare Pricing Tables for WordPress css3webpricingtablesgrids allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CSS3 Compare Pricing Tables for WordPress: from n/a through = 11.6...

CVE-2025-48138

BERTHA AI WordPress plugin (versions up to 1.12.11) is affected by a Missing Authorization vulnerability (broken access control). The CVE entry notes exploitation of incorrectly configured access control security levels, with CVSS v3.1 metrics indicating HIGH impact to confidentiality, integrity,...

CVE-2025-48138 WordPress BERTHA AI plugin <= 1.13 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Bertha AI – Andrew Palmer BERTHA AI bertha-ai-free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BERTHA AI: from n/a through = 1.13...

CVE-2025-48128 WordPress Sharespine Woocommerce Connector plugin <= 4.7.55 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Sharespine Sharespine Woocommerce Connector sharespine-woocommerce-connector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sharespine Woocommerce Connector: from n/a through = 4.7.55...

CVE-2025-48079

CVE-2025-48079 affects the WordPress ProfileGrid plugin (versions up to and including 5.9.5.1). It is a Missing Authorization/broken access control vulnerability arising from incorrectly configured access controls. Impact per sources is limited to unauthorized access scenarios involving ProfileGr...

PT-2025-21728 · Sharespine · Sharespine Woocommerce Connector

Name of the Vulnerable Software and Affected Versions: Sharespine Woocommerce Connector versions through 4.7.55 Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For...

PT-2025-21689 · Unknown · Simple Link Directory

Name of the Vulnerable Software and Affected Versions: Simple Link Directory Pro versions through 14.7.3 Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For version...