13175 matches found
CVE-2025-68542 WordPress Checkout Gateway for IRIS plugin <= 1.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in vgdevsolutions Checkout Gateway for IRIS checkout-gateway-iris allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Checkout Gateway for IRIS: from n/a through = 1.3...
CVE-2025-68534 WordPress PDF for WPForms plugin <= 6.3.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PDF for WPForms: from n/a through = 6.3.0...
CVE-2025-68534
CVE-2025-68534 : WordPress PDF for WPForms plugin <= 6.3.0 has a Missing Authorization vulnerability (Broken Access Control) in the pdf-for-wpforms add-on. Root cause: incorrectly configured access control security levels allowing unauthorized PDF access. Impact: potential unauthorized access ...
CVE-2025-68534 WordPress PDF for WPForms plugin <= 6.3.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PDF for WPForms: from n/a through = 6.3.0...
CVE-2025-68069 WordPress Directorist plugin <= 8.6.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in wpWax Directorist directorist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directorist: from n/a through = 8.6.6...
CVE-2025-68069
CVE-2025-68069 is a Missing/Broken Access Control vulnerability in the WordPress plugin Directorist (Directorist: AI-Powered Business Directory, Listings & Classified Ads) affecting versions up to 8.6.6. The root cause is incorrectly configured access control security levels, enabling unauthorize...
CVE-2025-68069 WordPress Directorist plugin <= 8.6.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in wpWax Directorist directorist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directorist: from n/a through = 8.6.6...
CVE-2025-68048 WordPress NextMove Lite plugin <= 2.23.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in XLPlugins NextMove Lite woo-thank-you-page-nextmove-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects NextMove Lite: from n/a through = 2.23.0...
CVE-2025-68050
CVE-2025-68050 tracks a Missing Authorization vulnerability in the WordPress Leadpages plugin (versions <= 1.1.3). The issue arises from broken access control/security level configuration, enabling unauthorized access due to an incorrectly configured access control. Affected software: Leadpage...
CVE-2025-68048
CVE-2025-68048 involves the WordPress plugin NextMove Lite (XLPlugins)
CVE-2025-68028 WordPress GA4WP: Google Analytics for WordPress plugin <= 2.10.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Passionate Brains GA4WP: Google Analytics for WordPress ga-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GA4WP: Google Analytics for WordPress: from n/a through = 2.10.0...
CVE-2025-68042
CVE-2025-68042 is a Missing Authorization vulnerability in the WordPress Travelpayouts plugin, affecting versions up to and including 1.2.2 (per NVD/Red Hat/CVE lists). The issue is described as broken access control allowing exploitation due to incorrectly configured access control security leve...
CVE-2025-68043 WordPress LottieFiles plugin <= 3.0.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in LottieFiles LottieFiles lottiefiles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LottieFiles: from n/a through = 3.0.0...
CVE-2025-68043
CVE-2025-68043 is a Missing Authorization / Broken Access Control vulnerability in the WordPress plugin LottieFiles (versions <= 3.0.0). The NVD and nuclei/patch sources describe an insecure access control configuration that lets an attacker bypass authorization and access or modify restricted...
CVE-2025-68028
CVE-2025-68028 is a confirmed missing authorization/broken access control issue in the WordPress plugin GA4WP – Analytics Dashboard for the Website (ga-for-wp) up to version 2.10.0 . The Red Hat and CVE records, plus NVD entries, describe a vulnerability allowing exploitation due to misconfigured...
CVE-2025-68042 WordPress Travelpayouts plugin <= 1.2.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Travelpayouts Travelpayouts travelpayouts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travelpayouts: from n/a through = 1.2.1...
CVE-2025-68025 WordPress Addonify Floating Cart For WooCommerce plugin <= 1.2.17 - Broken Access Control vulnerability
Missing Authorization vulnerability in Addonify Addonify Floating Cart For WooCommerce addonify-floating-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Addonify Floating Cart For WooCommerce: from n/a through = 1.2.17...
CVE-2025-68025
CVE-2025-68025 describes a Missing Authorization vulnerability in the WordPress plugin Addonify Floating Cart For WooCommerce (versions up to 1.2.17). The Red Hat/NVD entries and Patchstack/ PT Security details confirm a broken/badly configured access control that could allow unauthorized access....
CVE-2025-68025 WordPress Addonify Floating Cart For WooCommerce plugin <= 1.2.17 - Broken Access Control vulnerability
Missing Authorization vulnerability in Addonify Addonify Floating Cart For WooCommerce addonify-floating-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Addonify Floating Cart For WooCommerce: from n/a through = 1.2.17...
CVE-2025-68022
CVE-2025-68022 corresponds to a Missing Authorization / Broken Access Control vulnerability in the WordPress plugin BlueX for WooCommerce, affected versions up to 3.1.6. Public sources (Patchstack, Red Hat, CVE records) describe an incorrectly configured access control security level that could b...