CVE-2025-22318

Missing Authorization vulnerability in enituretechnology Standard Box Sizes – for WooCommerce standard-box-sizes.This issue affects Standard Box Sizes – for WooCommerce: from n/a through = 1.6.13...

CVE-2025-22318 WordPress Standard Box Sizes plugin <= 1.6.13 - Broken Access Control vulnerability

Missing Authorization vulnerability in Eniture Technology Standard Box Sizes – for WooCommerce. This issue affects Standard Box Sizes – for WooCommerce: from n/a through 1.6.13...

CVE-2025-22318

CVE-2025-22318: Missing Authorization in WordPress plugin Standard Box Sizes – for WooCommerce (Standard Box Sizes – for WooCommerce). Affected versions: up to 1.6.13. CVSS v3.1 base score 7.5 (HIGH) with I rating high and others; attack vector Network, no user interaction. This is a Broken/ Miss...

PT-2025-4259 · Oracle · Peoplesoft Enterprise Fin Cash Management

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise FIN Cash Management version 9.2 Description: The issue is related to weaknesses in the authorization mechanism of the Cash Management component in PeopleSoft Enterprise FIN Cash Management. This can be exploited by a...

CVE-2025-23862

Missing Authorization vulnerability in SzMake Contact Form 7 Anti Spambot contact-form-7-anti-spambot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form 7 Anti Spambot: from n/a through = 1.0.1...

CVE-2025-23764 WordPress Copy Move Posts plugin <= 1.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in ujjavaljani Copy Move Posts copy-move-posts.This issue affects Copy Move Posts: from n/a through = 1.6...

CVE-2025-23961 WordPress WordPress Graphs & Charts Plugin <= 2.0.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in wptasker WordPress Graphs & Charts graph-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Graphs & Charts: from n/a through = 2.0.8...

CVE-2025-23963 WordPress Mark Posts plugin <= 2.2.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in flymke Mark Posts mark-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mark Posts: from n/a through = 2.2.4...

CVE-2025-23917

CVE-2025-23917 affects Chamber Dashboard Business Directory (WordPress plugin), with impact described as a Missing Authorization vulnerability in configurations that govern access control. Affected range is listed as Chamber Dashboard Business Directory: from n/a through 3.3.8. The CVSS metric pr...

CVE-2025-23917 WordPress Chamber Dashboard Business Directory Plugin <= 3.3.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Chandrika Guntur, Morgan Kay Chamber Dashboard Business Directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chamber Dashboard Business Directory: from n/a through 3.3.8...

PT-2025-5230 · Awcode +1 · Awcode +2

Name of the Vulnerable Software and Affected Versions: Salvador – AI Image Generator versions 1.0.11 and earlier Description: The issue is related to a missing authorization vulnerability in AWcode and KingfisherFox Salvador – AI Image Generator, which allows the exploitation of incorrectly...

PT-2025-5082 · Unknown · Cache Sniper For Nginx

Name of the Vulnerable Software and Affected Versions: Cache Sniper for Nginx versions 1.0.4.2 and earlier Description: The issue is related to a missing authorization vulnerability in Cache Sniper for Nginx, which allows exploiting incorrectly configured access control security levels...

WordPress plugin WP Meetup 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2025-5235 · WordPress · Wordpress Graphs & Charts

Name of the Vulnerable Software and Affected Versions: WordPress Graphs & Charts versions prior to 2.0.9 Description: The issue is related to a missing authorization vulnerability in WP Tasker WordPress Graphs & Charts, which allows exploiting incorrectly configured access control security levels...

PT-2025-4870 · Sendgrid · Sendgrid For Wordpress

Name of the Vulnerable Software and Affected Versions: SendGrid for WordPress versions 1.4 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. This can lead to unauthorized access du...

PT-2025-5231 · Xola · Xola

Name of the Vulnerable Software and Affected Versions: Xola versions n/a through 1.6 Description: The issue is related to a missing authorization vulnerability in Xola, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For versions n/a throug...

PT-2025-5208 · Wishfulthemes · Wishfulthemes Email Capture & Lead Generation

Name of the Vulnerable Software and Affected Versions: wishfulthemes Email Capture & Lead Generation versions 1.0.2 and earlier Description: The issue is related to a missing authorization vulnerability in wishfulthemes Email Capture & Lead Generation, which allows exploiting incorrectly configur...

CVE-2025-22787

Missing Authorization vulnerability in bPlugins LLC Button Block allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Button Block: from n/a through 1.1.5...

CVE-2024-56295 WordPress Poll Maker plugin <= 5.5.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through = 5.5.6...

CVE-2025-22779 WordPress WP News Sliders plugin <= 1.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in codeaffairs WP News Sliders wp-news-sliders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP News Sliders: from n/a through = 1.0...