EUVD-2025-202036

Missing Authorization vulnerability in Jegstudio Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons gutenverse-news allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenverse News – Advanced News Magazine Blog Gutenberg Blocks Addons:...

CVE-2025-67588

Missing Authorization vulnerability in Elementor Elementor Website Builder elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elementor Website Builder: from n/a through = 3.33.0...

CVE-2025-67563

Missing Authorization vulnerability in Saad Iqbal Post SMTP post-smtp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post SMTP: from n/a through = 3.6.1...

EUVD-2025-202056

Missing Authorization vulnerability in Shahjahan Jewel Fluent Booking fluent-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Booking: from n/a through = 1.9.11...

PT-2025-50063

Missing Authorization vulnerability in Yandex Metrika Yandex.Metrica wp-yandex-metrika allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Yandex.Metrica: from n/a through = 1.2.2...

PT-2025-49966

Name of the Vulnerable Software and Affected Versions Joe Dolson My Calendar versions through 3.6.16 Description An authorization issue exists in Joe Dolson My Calendar, allowing exploitation due to incorrectly configured access control security levels. This allows unauthorized access to the...

PT-2025-50092

Name of the Vulnerable Software and Affected Versions Slider a SlidersPack versions prior to 2.3 Slider a SlidersPack version 2.0.2 Description An issue exists in Essential Plugin Slider a SlidersPack related to incorrectly configured access control security levels, allowing exploitation due to...

PT-2025-50067

Missing Authorization vulnerability in p-themes Porto Theme - Functionality porto-functionality allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Porto Theme - Functionality: from n/a through = 3.6.2...

PT-2025-50028

Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP ERP: from n/a through = 1.16.7...

PT-2025-49995

Missing Authorization vulnerability in themerain ThemeRain Core themerain-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ThemeRain Core: from n/a through = 1.1.9...

PT-2025-50019

Missing Authorization vulnerability in rainafarai Notification for Telegram notification-for-telegram allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Notification for Telegram: from n/a through = 3.4.7...

PT-2025-49880

CVE-2025-66532 Missing Authorization vulnerability in Mikado-Themes Powerlift powerlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Po… https://t.co/Aud5T0USX2...

PT-2025-49958

Name of the Vulnerable Software and Affected Versions rtCamp GoDAM versions through 1.4.6 Description An authorization issue exists in rtCamp GoDAM, allowing for an incorrect configuration of access control security levels and potential unauthorized access. Recommendations Update rtCamp GoDAM to ...

PT-2025-49869

Missing Authorization vulnerability in Bowo Admin and Site Enhancements ASE admin-site-enhancements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Admin and Site Enhancements ASE: from n/a through = 8.0.8...

PT-2025-49962

Name of the Vulnerable Software and Affected Versions Elementor versions prior to 3.33.0 Description An authorization issue exists in Elementor Website Builder. The issue stems from incorrectly configured access control security levels. This could allow unauthorized access. Recommendations Update...

WordPress plugin AdForest 安全漏洞

WordPress AdForest plugin is a popular classified ads solution for building an online classified ads platform on your WordPress website. WordPress AdForest plugin suffers from a missing authorization vulnerability that stems from an improperly configured access control security level. No detailed...

PT-2025-49944

Missing Authorization vulnerability in GSheetConnector by WesternDeal WPForms Google Sheet Connector gsheetconnector-wpforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPForms Google Sheet Connector: from n/a through = 4.0.0...

WordPress plugin weDocs 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. An authorizati...

HimoolERP 授权问题漏洞

HimoolERP is an enterprise resource planning management system by Himool Individual Developer. An authorization issue vulnerability exists in HimoolERP 2.2 and earlier versions, which stems from improper authorization of the function updateaccount in the file /api/admin/updateaccount/, which coul...

CVE-2025-54159

Missing authorization vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows remote attackers to delete arbitrary files via unspecified vectors...