CVE-2025-62953 WordPress Welcart e-Commerce plugin <= 2.11.24 - Broken Access Control vulnerability

Missing Authorization vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Welcart e-Commerce: from n/a through = 2.11.24...

CVE-2025-62939

CVE-2025-62939 : This is a stored XSS vulnerability in the WordPress plugin Open Currency Converter (artiss-currency-converter) affecting versions up to 1.5.0. The issue is described as improper neutralization of input during web page generation, enabling stored cross-site scripting. Per the prov...

CVE-2025-62938 WordPress Reoon Email Verifier plugin <= 2.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Reoon Technology Reoon Email Verifier reoon-email-verifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Reoon Email Verifier: from n/a through = 2.0.1...

CVE-2025-62929 WordPress Testimonial Slider plugin <= 2.0.15 - Broken Access Control vulnerability

Missing Authorization vulnerability in PickPlugins Testimonial Slider testimonial allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Testimonial Slider: from n/a through = 2.0.15...

CVE-2025-62928 WordPress SEO Meta Description Updater plugin <= 1.2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Joby Joseph SEO Meta Description Updater seo-meta-description-updater allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SEO Meta Description Updater: from n/a through = 1.2.0...

CVE-2025-62929

CVE-2025-62929 concerns the WordPress plugin “Testimonial Slider” (versions up to 2.0.15) and describes a Missing Authorization/Broken Access Control vulnerability. The issue arises from incorrectly configured access control security levels, enabling unauthorized actions that could affect testimo...

CVE-2025-62922 WordPress Export Categories plugin <= 1.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Shambhu Patnaik Export Categories export-categories allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Export Categories: from n/a through = 1.0...

CVE-2025-62924 WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerability

Missing Authorization vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid and Gutenberg Blocks: from n/a through = 2.3.17...

CVE-2025-62922 WordPress Export Categories plugin <= 1.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Shambhu Patnaik Export Categories export-categories allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Export Categories: from n/a through = 1.0...

CVE-2025-62918

CVE-2025-62918 is a Missing Authorization vulnerability affecting the WordPress plugin IgnitionDeck (

CVE-2025-62911 WordPress Rock Convert plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rock Content Rock Convert rock-convert allows Stored XSS.This issue affects Rock Convert: from n/a through = 3.0.1...

CVE-2025-62906 WordPress Referral Link Tracker plugin <= 1.1.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in epiphanyit321 Referral Link Tracker referral-link-tracker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Referral Link Tracker: from n/a through = 1.1.4...

CVE-2025-62904

The CVE concerns the WordPress WP Geo plugin (wp-geo) versions up to and including 3.5.1, with a Stored XSS vulnerability arising from improper input neutralization during Web Page Generation. The issue affects WP Geo in the range from n/a through 3.5.1. The Red Hat and ENISA/enrichment sources c...

CVE-2025-62898 WordPress Links shortcode plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Maarten Links shortcode links-shortcode allows Stored XSS.This issue affects Links shortcode: from n/a through = 1.8.3...

CVE-2025-62897

CVE-2025-62897 affects the WordPress plugin WP Recipe Maker (wp-recipe-maker), with versions up to and including 10.1.1 reported as vulnerable. The underlying issue is “Improper Neutralization of Script-Related HTML Tags” (Basic XSS) that enables Code Injection through content handling in the plu...

CVE-2025-62891 WordPress Off-Canvas Sidebars & Menus (Slidebars) plugin <= 0.5.8.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus Slidebars off-canvas-sidebars allows Cross Site Request Forgery.This issue affects Off-Canvas Sidebars & Menus Slidebars: from n/a through = 0.5.8.5...

CVE-2025-62890

CVE-2025-62890 is a CSRF vulnerability in the WordPress plugin Premmerce Brands for WooCommerce (versions n/a through 1.2.13). The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) yields a base score of 4.3 (Medium). The Red Hat and NVD entries corroborate that the issue concerns Cross-Site ...

CVE-2025-62889 WordPress King Addons for Elementor plugin <= 51.1.61 - Broken Access Control vulnerability

Missing Authorization vulnerability in KingAddons.com King Addons for Elementor king-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects King Addons for Elementor: from n/a through = 51.1.61...

CVE-2025-62882

CVE-2025-62882 affects the WordPress plugin Seriously Simple Podcasting (≤ 3.13.0). The root cause is an incorrectly configured access control mechanism that allows missing authorization, enabling a broken access control vulnerability. Reported across multiple sources (Red Hat, EU ENISA EUVD, CVE...

PT-2025-43761

Missing Authorization vulnerability in WP Lab WP-Lister Lite for eBay wp-lister-for-ebay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Lister Lite for eBay: from n/a through = 3.8.3...