2580 matches found
CVE-2025-32233
Technical details for CVE-2025-32233 are not publicly provided in the supplied documents. No affected version specifics, root cause, or remediation are given. Monitor for updates from official advisories and trusted vulnerability databases.
CVE-2025-32231 WordPress Bookingor plugin <= 2.0.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Bookingor Bookingor bookingor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bookingor: from n/a through = 2.0.1...
CVE-2025-32231 WordPress Bookingor plugin <= 1.0.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in Bookingor Bookingor allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Bookingor: from n/a through 1.0.6...
CVE-2025-32226
Technical details for CVE-2025-32226 are not provided in the supplied documents; no root-cause, affected versions beyond
CVE-2025-32219 WordPress eaSYNC plugin <= 1.3.19 - Broken Access Control vulnerability
Missing Authorization vulnerability in Syntactics, Inc. eaSYNC allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects eaSYNC: from n/a through 1.3.19...
CVE-2025-22285
CVE-2025-22285 concerns the WordPress plugin Pallet Packaging for WooCommerce. The vulnerability is a Missing Authorization (Broken Access Control) issue affecting Pallet Packaging for WooCommerce versions up to 1.1.15, enabling exploitation due to incorrectly configured access control security l...
TinyWebServer 授权问题漏洞
TinyWebServer is a C++ lightweight WebServer server for Linux by qinguoyi Personal Developer. An authorization issue vulnerability exists in TinyWebServer 1.0 and earlier versions, which stems from improper authentication...
PT-2025-14985 · WordPress · Ai Image Alt Text Generator For Wp
Name of the Vulnerable Software and Affected Versions: Ai Image Alt Text Generator for WP versions 1.0.8 and earlier Description: The issue is related to Missing Authorization, allowing exploitation of incorrectly configured access control security levels. Recommendations: For versions 1.0.8 and...
CVE-2025-31787
Missing Authorization vulnerability in AudioTheme Cue cue allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cue: from n/a through = 2.4.4...
CVE-2025-31854
Missing Authorization vulnerability in Sharaz Shahid Simple Sticky Add To Cart For WooCommerce sticky-add-to-cart-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Sticky Add To Cart For WooCommerce: from n/a through = 1.4.9...
CVE-2025-31816
Missing Authorization vulnerability in pietro Mobile App Canvas mobile-app allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mobile App Canvas: from n/a through = 3.8.2...
CVE-2025-31795 WordPress Shopify to WooCommerce Migration plugin <= 1.3.0 - Settings Change vulnerability
Missing Authorization vulnerability in Plugin Devs Shopify to WooCommerce Migration migrate-shopify-to-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shopify to WooCommerce Migration: from n/a through = 1.3.0...
CVE-2025-31789 WordPress TextMe SMS plugin <= 1.9.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Matat Technologies TextMe SMS textme-sms-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TextMe SMS: from n/a through = 1.9.1...
CVE-2025-31768 WordPress Widget Manager Light plugin <= 1.18 - Broken Access Control vulnerability
Missing Authorization vulnerability in OTWthemes Widget Manager Light widget-manager-light allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Widget Manager Light: from n/a through = 1.18...
PT-2025-14742 · Unknown · Local Magic
Name of the Vulnerable Software and Affected Versions: matthewrubin Local Magic versions n/a through 2.6.0 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions n/a...
CVE-2025-24205
An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access user-sensitive data...
Dell Wyse Management Suite WMS 安全漏洞
Wyse Management Suite WMS is a cloud and local management platform from Dell, USA. Wyse Management Suite WMS suffers from an authorization issue vulnerability that stems from insecure inheritance permissions, no details of the vulnerability are provided at this time...
CVE-2025-31870 WordPress WP AutoKeyword plugin <= 1.0 - Arbitrary Content Deletion vulnerability
Missing Authorization vulnerability in EXEIdeas International WP AutoKeyword wp-autokeyword allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP AutoKeyword: from n/a through = 1.0...
CVE-2025-31836 WordPress Review Manager Plugin <= 2.2.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in matthewrubin Review Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Review Manager: from n/a through 2.2.0...
CVE-2025-31834 WordPress JobBoard Job listing plugin Plugin <= 1.2.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in themeglow JobBoard Job listing allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JobBoard Job listing: from n/a through 1.2.7...