CVE-2025-30543 WordPress Menu Duplicator plugin <= 1.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in swayam.tejwani Menu Duplicator copy-menu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Menu Duplicator: from n/a through = 1.0...

CVE-2025-28874

Authorization Bypass Through User-Controlled Key vulnerability in shanebp BP Email Assign Templates bp-email-assign-templates allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BP Email Assign Templates: from n/a through = 1.7...

CVE-2025-24053 Microsoft Dataverse Elevation of Privilege Vulnerability

...

CVE-2025-28874

Authorization Bypass Through User-Controlled Key vulnerability in shanebp BP Email Assign Templates bp-email-assign-templates allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BP Email Assign Templates: from n/a through = 1.7...

CVE-2025-28938 WordPress WP Performance Pack plugin <= 2.5.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Bjoern WP Performance Pack wp-performance-pack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Performance Pack: from n/a through = 2.5.3...

CVE-2025-28920 WordPress Responsive Google Map plugin <= 3.1.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Jogesh Responsive Google Map responsive-google-map allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Google Map: from n/a through = 3.1.5...

CVE-2025-28920

CVE-2025-28920 affects the WordPress plugin “Responsive Google Map” up to version 3.1.5. The issue is a Missing/Broken Authorization flaw (improper access control) that could allow exploitation of misconfigured access levels. No exploit specifics or affected product versions beyond 3.1.5 are prov...

CVE-2025-28920 WordPress Responsive Google Map plugin <= 3.1.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Jogesh Responsive Google Map responsive-google-map allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Google Map: from n/a through = 3.1.5...

CVE-2025-23613

Missing Authorization vulnerability in mediabeta WP Journal wpjournal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Journal: from n/a through = 1.1...

CVE-2024-8261 IDOR in Proliz Software's OBS

Authorization Bypass Through User-Controlled Key vulnerability in Proliz Software OBS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects OBS: before 24.0927...

CVE-2025-23613

Missing Authorization vulnerability in mediabeta WP Journal wpjournal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Journal: from n/a through = 1.1...

CVE-2025-23440

Missing Authorization vulnerability in radicaldesigns radSLIDE radslide allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects radSLIDE: from n/a through = 2.1...

CVE-2025-23763

CVE-2025-23763 concerns WordPress WAH Forms plugin

CVE-2025-23763 WordPress WAH Forms plugin <= 1.0 - Sensitive Data Exposure vulnerability

Missing Authorization vulnerability in Alex Volkov WAH Forms allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WAH Forms: from n/a through 1.0...

CVE-2025-23613

WordPress WP Journal plugin

CVE-2025-23515

CVE-2025-23515 corresponds to a Missing Authorization vulnerability in the WordPress plugin ts-tree, affecting ts-tree versions up to 0.1.1. The vulnerability is described as Arbitrary Content Deletion due to insufficient access control (Authenticated/Subscriber+ level). Public data confirms the ...

CVE-2025-23440

The CVE-2025-23440 entry concerns the WordPress radicaldesigns radSLIDE plugin (versions up to 2.1). The Red Hat/Red Team and CVE references describe a Missing Authorization vulnerability with incorrect/opaque access control levels, effectively a Broken Access Control that can enable a Stored Cro...

CVE-2025-26983

Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor recipe-card-blocks-by-wpzoom allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Recipe Card Blocks for Gutenberg & Elementor: from n/a through = 3.4.3...

CVE-2025-26995

Missing Authorization vulnerability in Anton Vanyukov Market Exporter market-exporter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Market Exporter: from n/a through = 2.0.21...

CVE-2025-22280

Missing Authorization vulnerability in revmakx DefendWP Firewall defend-wp-firewall allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DefendWP Firewall: from n/a through = 1.1.0...