PT-2025-54453

Name of the Vulnerable Software and Affected Versions Logger for Elementor versions through 1.0.9 Description An authorization issue exists in Logger for Elementor, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update Logger for Elementor to a...

WordPress plugin Easy Digital Downloads 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. An authorization issue...

PT-2025-53870

Name of the Vulnerable Software and Affected Versions WeDesignTech Portfolio versions through 1.0.2 Description An authorization issue exists in WeDesignTech Portfolio, allowing exploitation of incorrectly configured access control security levels. Recommendations Update WeDesignTech Portfolio to...

PT-2025-53920

Name of the Vulnerable Software and Affected Versions wpdesk ShopMagic versions through 4.7.2 Description An authorization issue exists in wpdesk ShopMagic shopmagic-for-woocommerce, allowing exploitation of incorrectly configured access control security levels. Recommendations Update wpdesk...

PT-2025-53872

Name of the Vulnerable Software and Affected Versions DesignThemes LMS Addon versions prior to and including 2.6 Description An authorization issue exists in the DesignThemes LMS Addon due to incorrectly configured access control security levels. This allows for potential exploitation of the...

PT-2025-53905

Name of the Vulnerable Software and Affected Versions bizswoop BizPrint versions through 4.6.7 Description An authorization issue exists within bizswoop BizPrint, allowing exploitation due to incorrectly configured access control security levels. This allows unauthorized access. Recommendations...

PT-2025-53912

Name of the Vulnerable Software and Affected Versions Skywarrior Arcane versions through 3.6.6 Description An authorization issue exists in Skywarrior Arcane. The problem involves incorrectly configured access control security levels, potentially allowing unauthorized access. Recommendations Upda...

PT-2025-53795

Name of the Vulnerable Software and Affected Versions Crocoblock JetBlog versions through 2.4.7 Description An authorization issue exists in Crocoblock JetBlog, allowing exploitation of incorrectly configured access control security levels. This can lead to unauthorized access. Recommendations...

PT-2025-53909

Name of the Vulnerable Software and Affected Versions BoldGrid weForms versions through 1.6.25 Description An authorization issue exists in BoldGrid weForms that allows exploitation due to incorrectly configured access control security levels. Recommendations Update BoldGrid weForms to a version...

JeecgBoot 授权问题漏洞

JeecgBoot is a low-code development platform that fuses code generation and AI applications to help organizations rapidly achieve low-code development and build AI applications. JeecgBoot has an authorization issue vulnerability that originates from improper authorization of parameter deptId in t...

JeecgBoot 授权问题漏洞

JeecgBoot is a low-code development platform that fuses code generation and AI applications to help organizations rapidly achieve low-code development and build AI applications. JeecgBoot suffers from an authorization issue vulnerability, which stems from improper authorization of the parameter...

PT-2025-53904

Name of the Vulnerable Software and Affected Versions Marketing Fire Discussion Board wp-discussion-board versions through 2.5.7 Description An authorization issue exists in Marketing Fire Discussion Board wp-discussion-board, allowing exploitation due to incorrectly configured access control...

mall 授权问题漏洞

mall is an e-commerce system for macro individual developers, including frontend mall system and backend management system. An authorization issue vulnerability exists in macrozheng mall 1.0.3 and earlier versions, which stems from incorrect manipulation of the file /member/address/update/, which...

JeecgBoot 授权问题漏洞

JeecgBoot is a low-code development platform that fuses code generation and AI applications to help organizations rapidly achieve low-code development and build AI applications. JeecgBoot suffers from an authorization issue vulnerability that stems from improper authorization in the file...

Xiaozhi ESP32 Server Java 授权问题漏洞

Xiaozhi ESP32 Server Java is a Java enterprise management platform for joey individual developers. An authorization issue vulnerability exists in Xiaozhi ESP32 Server Java 3.0.0 and earlier versions, which stems from a misbehavior of the function tryAuthenticateWithCookies in the file...

CVE-2025-68938

CVE-2025-68938 affects Gitea prior to 1.25.2, where the authorization for deleting releases is mishandled. The issue enables an attacker with minimal privileges to delete project releases, potentially leading to loss of assets and distribution history. Public references indicate the fix is in Git...

Alteryx Server 授权问题漏洞

Alteryx Server is a cloud-hosted or self-hosted application from Alteryx, Inc. It is used to publish, share and execute workflows. An authorization issue vulnerability exists in Alteryx Server that stems from improper authentication in the file /gallery/api/status/, which could lead to a remote...

PT-2025-53891

Name of the Vulnerable Software and Affected Versions Medicalequipment versions n/a through 1.0.9 Description An authorization issue exists in kamleshyadav Medicalequipment medicalequipment, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update...

CVE-2025-15087 youlaitech youlai-mall OrderController.java submitOrderPayment improper authorization

A security vulnerability has been detected in youlaitech youlai-mall 1.0.0/2.0.0. Affected is the function submitOrderPayment of the file mall-oms/oms-boot/src/main/java/com/youlai/mall/oms/controller/app/OrderController.java. Such manipulation of the argument orderSn leads to improper...

PT-2025-53284

Name of the Vulnerable Software and Affected Versions Bit Assist versions through 1.5.11 Description An authorization issue exists in Bit Apps Bit Assist. The problem involves incorrectly configured access control security levels, potentially allowing unauthorized access. Recommendations Update B...