CVE-2024-50500

CVE-2024-50500 : Missing Authorization in By Averta Shortcodes and Phlox theme features (Shortcodes and extra features for Phlox theme) allows exploitation of insufficient access controls. Affected: WordPress Phlox Core Elements plugin up to version 2.17.2 (and Phlox theme components referenced a...

CVE-2024-50500 WordPress Phlox Core Elements plugin <= 2.17.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in averta Shortcodes and extra features for Phlox theme auxin-elements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shortcodes and extra features for Phlox theme: from n/a through = 2.17.4...

CVE-2025-22677

CVE-2025-22677: WordPress Uix Shortcodes

CVE-2025-22260

CVE-2025-22260: Missing Authorization in WordPress Meta Tag Manager plugin (Pixelite) affects versions n/a through 3.1. CVSS v3.1 base score 4.3 (Medium); impact is limited to Missing Authorization. Connected sources confirm the vulnerability name, affected version range, and that it stems from B...

CVE-2025-23527 WordPress WC Wallet plugin <= 2.2.0 - Arbitrary Content Deletion vulnerability

Missing Authorization vulnerability in hemnathmouli WC Wallet wc-wallet allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WC Wallet: from n/a through = 2.2.0...

PT-2025-4921 · Wc Wallet · Wc Wallet

Name of the Vulnerable Software and Affected Versions: WC Wallet versions n/a through 2.2.0 Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by Access Control Lists ACLs. ACLs are used to define permissions f...

WordPress MWB HubSpot for WooCommerce plugin <= 1.5.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Options Update vulnerability

Missing Authorization to Authenticated Contributor+ Arbitrary Options Update vulnerability discovered by 1337Wannabe in WordPress Plugin MWB HubSpot for WooCommerce versions = 1.5.9...

CVE-2024-41140

CVE-2024-41140 affects Zohocorp ManageEngine Applications Manager versions 174000 and prior, with an incorrect authorization in the update user function. Public documentation from NVD and Red Hat confirms impact to confidentiality and integrity (high), with network attack vector, low attack compl...

Microsoft Account Elevation of Privilege Vulnerability

Missing authorization in Microsoft Account allows an unauthorized attacker to elevate privileges over a network...

CVE-2025-24744

Missing Authorization vulnerability in NotFound Bridge Core. This issue affects Bridge Core: from n/a through 3.3...

CVE-2025-23529

Missing Authorization vulnerability in blokhauswp Minterpress minterpress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Minterpress: from n/a through = 1.0.5...

CVE-2025-24734 WordPress Better Find and Replace plugin <= 1.6.7 - Privilege Escalation vulnerability

Missing Authorization vulnerability in CodeSolz Better Find and Replace allows Privilege Escalation. This issue affects Better Find and Replace: from n/a through 1.6.7...

CVE-2025-23656 WordPress Donate visa plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerability

Missing Authorization vulnerability in Saul Morales Pacheco Donate visa donate-visa allows Stored XSS.This issue affects Donate visa: from n/a through = 1.0.0...

CVE-2025-23529 WordPress Minterpress plugin <= 1.0.5 - Arbitrary Content Deletion vulnerability

Missing Authorization vulnerability in blokhauswp Minterpress minterpress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Minterpress: from n/a through = 1.0.5...

CVE-2025-24754 WordPress Houzez theme <= 3.4.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Houzez.co Houzez. This issue affects Houzez: from n/a through 3.4.0...

CVE-2025-24705

Missing Authorization vulnerability in Arshid WooCommerce Quick View woo-quick-view allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Quick View: from n/a through = 1.1.1...

CVE-2025-24751

CVE-2025-24751 concerns the GoDaddy CoBlocks WordPress plugin (versions up to 3.1.13). The incident is a Missing Authorization (Broken Access Control) vulnerability arising from incorrectly configured access control levels, enabling unauthorized actions within CoBlocks. Public sources (Patchstack...

CVE-2025-24751 WordPress CoBlocks plugin <= 3.1.13 - Broken Access Control vulnerability

Missing Authorization vulnerability in GoDaddy CoBlocks coblocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CoBlocks: from n/a through = 3.1.13...

CVE-2025-24753 WordPress Kadence Blocks plugin <= 3.3.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenberg Blocks by Kadence Blocks: from n/a through = 3.3.1...

CVE-2025-24693 WordPress Advanced Notifications plugin <= 1.2.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Yehi Advanced Notifications allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Advanced Notifications: from n/a through 1.2.7...