CVE-2025-30803

Missing Authorization vulnerability in Greg Ross Just Writing Statistics just-writing-statistics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Just Writing Statistics: from n/a through = 5.3...

CVE-2025-30809

Missing Authorization vulnerability in Shahjada Live Forms liveforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Live Forms: from n/a through = 4.8.4...

CVE-2025-30777

Authorization Bypass Through User-Controlled Key vulnerability in DevItems Support Genix support-genix-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Support Genix: from n/a through = 1.4.11...

CVE-2025-30909 WordPress Conversios.io plugin <= 7.2.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Conversios Conversios.io enhanced-e-commerce-for-woocommerce-store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Conversios.io: from n/a through = 7.2.3...

CVE-2025-30894 WordPress WP Fast Total Search plugin <= 1.79.262 - Broken Access Control vulnerability

Missing Authorization vulnerability in Epsiloncool WP Fast Total Search fulltext-search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Fast Total Search: from n/a through = 1.79.262...

CVE-2025-30887

CVE-2025-30887 is listed with concrete details in connected data: the WordFence entry ties this to the WordPress plugin “Event Manager and Tickets Selling Plugin for WooCommerce — WpEvently.” It identifies an Authenticated (Contributor+) Local File Inclusion vulnerability in WpEvently versions up...

CVE-2025-30883

CVE-2025-30883 is a Missing Authorization issue in the Trust.Reviews fb-reviews-widget (Social Reviews & Recommendations). The Wordfence entry confirms a Missing Authorization weakness affecting Trust.Reviews before patching, with CVSS v3.1 base score ~4.3. Impact centers on improper access contr...

CVE-2025-30881

CVE-2025-30881 affects the WordPress theme Big Store (ThemeHunk) and is disclosed as a Missing Authorization vulnerability for Big Store versions up to 2.0.8. Connected Wordfence content confirms the issue is real for Big Store and shows a Patched status, indicating a fix exists in a subsequent r...

CVE-2025-30883 WordPress Trust.Reviews plugin <= 2.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in richplugins Trust.Reviews fb-reviews-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trust.Reviews: from n/a through = 2.3...

CVE-2025-30883 WordPress Trust.Reviews plugin <= 2.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in richplugins Trust.Reviews fb-reviews-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trust.Reviews: from n/a through = 2.3...

CVE-2025-30866 WordPress Terms & Conditions Per Product plugin <= 1.2.15 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Giannis Kipouros Terms & Conditions Per Product terms-and-conditions-per-product allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Terms & Conditions Per Product: from n/a through = 1.2.15...

CVE-2025-30864 WordPress Exchange Rates plugin <= 1.2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in falselight Exchange Rates exchange-rates allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Exchange Rates: from n/a through = 1.2.2...

CVE-2025-30864

Technical details for CVE-2025-30864 are not publicly provided in the supplied documents. The entry notes a Missing Authorization issue in the Exchange Rates plugin (affected versions up to 1.2.2), but there are no specifics, exploit data, or remediation details in the sources.

CVE-2025-30861 WordPress Five Star Restaurant Reservations plugin <= 2.6.29 - Broken Access Control vulnerability

Missing Authorization vulnerability in Rustaurius Five Star Restaurant Reservations restaurant-reservations allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Five Star Restaurant Reservations: from n/a through = 2.6.29...

CVE-2025-30851

CVE-2025-30851 in Tickera – Tickera WordPress Event Ticketing plugin (Tickera) is a Missing Authorization vulnerability caused by incorrectly configured access control security levels. The issue affects Tickera versions from n/a up to and including 3.5.5.2. The CVSS v3.1 base score is 4.3 (Medium...

CVE-2025-30830 WordPress Cool Author Box plugin <= 2.9.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Hossni Mubarak Cool Author Box hm-cool-author-box-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cool Author Box: from n/a through = 2.9.9...

CVE-2025-30830

CVE-2025-30830 : Exists in Cool Author Box (WordPress plugin) up to version 2.9.9. Root cause is Missing/Incomplete Authorization due to misconfigured access control levels, enabling unauthorized actions. Patch status in connected data shows a fix in version 2.9.9; remediation is to upgrade to 2....

CVE-2025-30830 WordPress Cool Author Box plugin <= 2.9.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Hossni Mubarak Cool Author Box hm-cool-author-box-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cool Author Box: from n/a through = 2.9.9...

CVE-2025-30828

Summary of CVE-2025-30828 (Timetics) : A Missing Authorization vulnerability in the WordPress plugin Timetics (by Arraytics) permits unauthorized actions due to incorrectly configured access controls. Affected versions are listed as from not available (n/a) up to 1.0.29. The issue is classified a...

CVE-2025-30824

CVE-2025-30824 : Textmetrics (Israpil Textmetrics) has a Missing Authorization flaw affecting versions up to 3.6.1, due to incorrectly configured access control levels. The vulnerability is documented with a moderate impact (base score 5.4, CVSS 3.1) and indicates that an attacker may bypass auth...