PT-2025-50005

Missing Authorization vulnerability in opicron Image Cleanup image-cleanup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Cleanup: from n/a through = 1.9.2...

PT-2025-50011

Missing Authorization vulnerability in Evan Herman Post Cloner post-cloner allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Cloner: from n/a through = 1.0.0...

PT-2025-49962

Name of the Vulnerable Software and Affected Versions Elementor versions prior to 3.33.0 Description An authorization issue exists in Elementor Website Builder. The issue stems from incorrectly configured access control security levels. This could allow unauthorized access. Recommendations Update...

PT-2025-49883

Missing Authorization vulnerability in sergiotrinity Trinity Audio trinity-audio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trinity Audio: from n/a through = 5.23.3...

PT-2025-49942

CVE-2025-67568 Missing Authorization vulnerability in xtemos Basel basel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Basel: from n/a t… https://t.co/uuL3H0mZSZ...

PT-2025-49936

Name of the Vulnerable Software and Affected Versions Image Caption Hover Pro versions prior to 20.0 Description An authorization issue exists in WebCodingPlace Image Caption Hover Pro image-caption-hover-pro, allowing exploitation due to incorrectly configured access control security levels...

PT-2025-49875

CVE-2025-66527 Missing Authorization vulnerability in VanKarWai Lobo lobo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lobo: from n/a t… https://t.co/PPje4l4kqr...

PT-2025-50007

Missing Authorization vulnerability in mmattax Formstack Online Forms formstack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Formstack Online Forms: from n/a through = 2.0.2...

PT-2025-49874

Name of the Vulnerable Software and Affected Versions Essekia Tablesome versions through 1.1.34 Description An authorization issue exists in Essekia Tablesome, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update Essekia Tablesome to a version...

PT-2025-50000

Missing Authorization vulnerability in ConveyThis ConveyThis conveythis-translate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ConveyThis: from n/a through = 268.10...

PT-2025-49945

Name of the Vulnerable Software and Affected Versions WPFunnels versions through 3.6.2 Description An authorization issue exists in WPFunnels wpfunnels, allowing exploitation of incorrectly configured access control security levels. Recommendations Update WPFunnels to a version later than 3.6.2...

PT-2025-50022

Missing Authorization vulnerability in Code Amp Custom Layouts – Post + Product grids made easy custom-layouts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Layouts – Post + Product grids made easy: from n/a through = 1.4.12...

RUSTSEC-2025-0127 CGGMP21 presignatures can be used in the way that significantly reduces security

This attack is against presignatures used in very specific context: Presignatures + HD wallets derivation: security level reduces to 85 bits \ Previously you could generate a presignature, and then choose a HD derivation path while issuing a partial signature via Presignature::setderivationpath,...

CVE-2025-66110

Missing Authorization vulnerability in bPlugins Tiktok Feed b-tiktok-feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tiktok Feed: from n/a through = 1.0.23...

EUVD-2025-198445

Missing Authorization vulnerability in octolize Cart Weight for WooCommerce woo-cart-weight allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cart Weight for WooCommerce: from n/a through = 1.9.11...

EUVD-2025-198463

Missing Authorization vulnerability in Shahjahan Jewel FluentCommunity fluent-community allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentCommunity: from n/a through = 2.0.0...

EUVD-2025-198472

Missing Authorization vulnerability in tychesoftwares Custom Order Numbers for WooCommerce custom-order-numbers-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Order Numbers for WooCommerce: from n/a through = 1.11.0...

EUVD-2025-198471

Missing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UsersWP: from n/a through = 1.2.47...

CVE-2025-66106

Missing Authorization vulnerability in Essential Plugin Featured Post Creative featured-post-creative allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Post Creative: from n/a through = 1.5.5...

CVE-2025-66087

Missing Authorization vulnerability in Property Hive PropertyHive propertyhive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PropertyHive: from n/a through = 2.1.12...