WordPress plugin History Timeline 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

PT-2025-53891

Name of the Vulnerable Software and Affected Versions Medicalequipment versions n/a through 1.0.9 Description An authorization issue exists in kamleshyadav Medicalequipment medicalequipment, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update...

PT-2025-53870

Name of the Vulnerable Software and Affected Versions WeDesignTech Portfolio versions through 1.0.2 Description An authorization issue exists in WeDesignTech Portfolio, allowing exploitation of incorrectly configured access control security levels. Recommendations Update WeDesignTech Portfolio to...

PT-2025-53872

Name of the Vulnerable Software and Affected Versions DesignThemes LMS Addon versions prior to and including 2.6 Description An authorization issue exists in the DesignThemes LMS Addon due to incorrectly configured access control security levels. This allows for potential exploitation of the...

PT-2025-53912

Name of the Vulnerable Software and Affected Versions Skywarrior Arcane versions through 3.6.6 Description An authorization issue exists in Skywarrior Arcane. The problem involves incorrectly configured access control security levels, potentially allowing unauthorized access. Recommendations Upda...

PT-2025-53882

Name of the Vulnerable Software and Affected Versions XforWooCommerce Share, Print and PDF Products for WooCommerce versions through 3.1.2 Description The software contains a missing authorization issue due to incorrectly configured access control security levels. This allows for potential...

PT-2025-53883

Name of the Vulnerable Software and Affected Versions XforWooCommerce Product Loops for WooCommerce versions through 2.1.2 Description An authorization issue exists in XforWooCommerce Product Loops for WooCommerce. The issue involves incorrectly configured access control security levels,...

PT-2025-53909

Name of the Vulnerable Software and Affected Versions BoldGrid weForms versions through 1.6.25 Description An authorization issue exists in BoldGrid weForms that allows exploitation due to incorrectly configured access control security levels. Recommendations Update BoldGrid weForms to a version...

PT-2025-53920

Name of the Vulnerable Software and Affected Versions wpdesk ShopMagic versions through 4.7.2 Description An authorization issue exists in wpdesk ShopMagic shopmagic-for-woocommerce, allowing exploitation of incorrectly configured access control security levels. Recommendations Update wpdesk...

PT-2025-53904

Name of the Vulnerable Software and Affected Versions Marketing Fire Discussion Board wp-discussion-board versions through 2.5.7 Description An authorization issue exists in Marketing Fire Discussion Board wp-discussion-board, allowing exploitation due to incorrectly configured access control...

PT-2025-53905

Name of the Vulnerable Software and Affected Versions bizswoop BizPrint versions through 4.6.7 Description An authorization issue exists within bizswoop BizPrint, allowing exploitation due to incorrectly configured access control security levels. This allows unauthorized access. Recommendations...

PT-2025-53795

Name of the Vulnerable Software and Affected Versions Crocoblock JetBlog versions through 2.4.7 Description An authorization issue exists in Crocoblock JetBlog, allowing exploitation of incorrectly configured access control security levels. This can lead to unauthorized access. Recommendations...

JeecgBoot 授权问题漏洞

JeecgBoot is a low-code development platform that fuses code generation and AI applications to help organizations rapidly achieve low-code development and build AI applications. JeecgBoot suffers from an authorization issue vulnerability, which stems from improper authorization of the parameter...

Xiaozhi ESP32 Server Java 授权问题漏洞

Xiaozhi ESP32 Server Java is a Java enterprise management platform for joey individual developers. An authorization issue vulnerability exists in Xiaozhi ESP32 Server Java 3.0.0 and earlier versions, which stems from a misbehavior of the function tryAuthenticateWithCookies in the file...

mall 授权问题漏洞

mall is an e-commerce system for macro individual developers, including frontend mall system and backend management system. An authorization issue vulnerability exists in macrozheng mall 1.0.3 and earlier versions, which stems from incorrect manipulation of the file /member/address/update/, which...

JeecgBoot 授权问题漏洞

JeecgBoot is a low-code development platform that fuses code generation and AI applications to help organizations rapidly achieve low-code development and build AI applications. JeecgBoot has an authorization issue vulnerability that originates from improper authorization of parameter deptId in t...

JeecgBoot 授权问题漏洞

JeecgBoot is a low-code development platform that fuses code generation and AI applications to help organizations rapidly achieve low-code development and build AI applications. JeecgBoot suffers from an authorization issue vulnerability that stems from improper authorization in the file...

CVE-2025-68938

CVE-2025-68938 affects Gitea prior to 1.25.2, where the authorization for deleting releases is mishandled. The issue enables an attacker with minimal privileges to delete project releases, potentially leading to loss of assets and distribution history. Public references indicate the fix is in Git...

Alteryx Server 授权问题漏洞

Alteryx Server is a cloud-hosted or self-hosted application from Alteryx, Inc. It is used to publish, share and execute workflows. An authorization issue vulnerability exists in Alteryx Server that stems from improper authentication in the file /gallery/api/status/, which could lead to a remote...

CVE-2025-15087 youlaitech youlai-mall OrderController.java submitOrderPayment improper authorization

A security vulnerability has been detected in youlaitech youlai-mall 1.0.0/2.0.0. Affected is the function submitOrderPayment of the file mall-oms/oms-boot/src/main/java/com/youlai/mall/oms/controller/app/OrderController.java. Such manipulation of the argument orderSn leads to improper...