CVE-2025-31795

Missing Authorization vulnerability in Plugin Devs Shopify to WooCommerce Migration migrate-shopify-to-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shopify to WooCommerce Migration: from n/a through = 1.3.0...

CVE-2025-31729

Missing Authorization vulnerability in jeffikus WooTumblog woo-tumblog allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooTumblog: from n/a through = 2.1.4...

CVE-2025-31739

Missing Authorization vulnerability in Manuel Schmalstieg Minimalistic Event Manager minimalistic-event-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Minimalistic Event Manager: from n/a through = 1.1.1...

CVE-2025-30915

Missing Authorization vulnerability in enituretechnology Small Package Quotes – Worldwide Express Edition small-package-quotes-wwe-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Small Package Quotes – Worldwide Express Edition: from n/a through ...

CVE-2025-30916

Missing Authorization vulnerability in enituretechnology Residential Address Detection residential-address-detection allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Residential Address Detection: from n/a through = 2.5.4...

CVE-2025-31408

Missing Authorization vulnerability in Zoho Flow Zoho Flow zoho-flow allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zoho Flow: from n/a through = 2.13.3...

CVE-2025-31909 WordPress Apptivo Business Site CRM plugin <= 5.3 - Arbitrary Content Deletion vulnerability

Missing Authorization vulnerability in Apptivo Apptivo Business Site CRM apptivo-business-site allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Apptivo Business Site CRM: from n/a through = 5.3...

CVE-2025-31909

CVE-2025-31909 – Apptivo Business Site CRM: vulnerability in the product allowing Missing Authorization to Arbitrary Content Deletion. Affected: Apptivo Business Site CRM (≤5.3). Status: Unpatched per linked documentation. CVSS v3.1 base score: 7.5 (High). No exploitation details provided in the ...

CVE-2025-31876

CVE-2025-31876 is a Missing Authorization vulnerability in the Payday WordPress plugin. The entry states an authorization/configuration flaw that could allow access to restricted functionality due to incorrectly configured access control levels, affecting Payday versions up to 3.3.12 (the initial...

CVE-2025-31896 WordPress GetBookingsWP Plugin <= 1.1.27 - Broken Access Control vulnerability

Missing Authorization vulnerability in istmoplugins GetBookingsWP get-bookings-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GetBookingsWP: from n/a through = 1.1.27...

CVE-2025-31876 WordPress Payday plugin <= 3.3.18 - Broken Access Control vulnerability

Missing Authorization vulnerability in gunnarpayday Payday payday allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Payday: from n/a through = 3.3.18...

CVE-2025-31896

Technical details for CVE-2025-31896 are not provided in the supplied documents. No information on affected product/version/root cause/impact/remediation is available here; monitor for updates.

CVE-2025-31795

CVE-2025-31795 affects SWM – Shopify to WooCommerce Migration. Vulnerability: Missing Authorization allows unauthenticated settings updates for versions from 1.0.0 up to 1.3.0 (from Initial Description: n/a through 1.3.0). Current status: patch not present in provided docs (Unpatched). References...

CVE-2025-31841 WordPress FPW Category Thumbnails Plugin <= 1.9.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Frank P. Walentynowicz FPW Category Thumbnails allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects FPW Category Thumbnails: from n/a through 1.9.5...

CVE-2025-31858

CVE-2025-31858 is a Missing Authorization vulnerability in the Local Magic plugin for WordPress. Connected documents indicate Local Magic versions up to 2.6.0 are affected and that the issue remains unpatched. The primary description notes a Missing Authorization configuration flaw, but the conne...

CVE-2025-31789

CVE-2025-31789 is a Missing Authorization vulnerability in TextMe SMS (textme-sms-integration) by Matat Technologies. Affected product: TextMe SMS WordPress plugin (TextMe SMS integration) up to version ≤ 1.9.1. Underlying issue: broken access control enabling unauthorized actions. CVSS 3.1 base ...

CVE-2025-31758

Technical details about CVE-2025-31758 are not publicly provided in the connected documents. The initial description contains basic context but no concrete affected product versions, root cause, exploit vectors, or remediation details in the supplied materials. Monitor for updates.

CVE-2025-31746 WordPress Clients plugin <= 1.1.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Think201 Clients clients allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clients: from n/a through = 1.1.4...

CVE-2025-31746 WordPress Clients plugin <= 1.1.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Think201 Clients clients allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clients: from n/a through = 1.1.4...

CVE-2025-31794

Technical details for CVE-2025-31794 are not provided in the connected documents. The supplied materials mention a Missing Authorization issue affecting WR Price List Manager For Woocommerce up to v1.0.8, but no concrete exploit, affected build(s), root cause, impact, or fix is documented here.