13309 matches found
WordPress Nelio Popups plugin <= 1.3.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Jitlada in WordPress Plugin Nelio Popups versions = 1.3.5...
CVE-2025-68933 Discourse non-admin moderators can exfiltrate private content via post ownership transfer
Discourse is an open source discussion platform. In versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0, non-admin moderators with the moderatorschangepostownership setting enabled can change ownership of posts in private messages and restricted categories they cannot access, then export...
WordPress Elementor Contact Form DB plugin <= 2.1.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by You Ludwig in WordPress Plugin Elementor Contact Form DB versions = 2.1.3...
WordPress JAMstack Deployments plugin <= 1.1.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin JAMstack Deployments versions = 1.1.1...
WordPress EventPrime plugin <= 4.2.8.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Bao - BlueRock in WordPress Plugin EventPrime versions = 4.2.8.0...
WordPress Advanced iFrame plugin <= 2025.10 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Advanced iFrame versions = 2025.10...
WordPress WPBookit Pro plugin <= 1.6.18 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Phat RiO in WordPress Plugin WPBookit Pro versions = 1.6.18...
WordPress News Kit Elementor Addons plugin <= 1.4.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by 0xd4rk5id3 in WordPress Plugin News Kit Elementor Addons versions = 1.4.2...
WordPress UpsellWP plugin <= 2.2.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Rapid0nion in WordPress Plugin UpsellWP versions = 2.2.3...
WordPress MailerLite plugin <= 1.7.18 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by daroo in WordPress Plugin MailerLite versions = 1.7.18...
WordPress WP Recipe Maker plugin <= 10.2.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by daroo in WordPress Plugin WP Recipe Maker versions = 10.2.4...
WordPress ModelTheme Framework plugin <= 1.9.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin ModelTheme Framework versions = 1.9.2...
WordPress Sendy plugin <= 3.4.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Sendy versions = 3.4.2...
WordPress EmailKit plugin <= 1.6.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by daroo in WordPress Plugin EmailKit versions = 1.6.2...
CVE-2025-67645
OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.0.4 have a broken access control in the Profile Edit endpoint. An authenticated normal user can modify the request parameters pubpid / pid to reference another user’s recor...
CVE-2025-67645 OpenEMR Vulnerable to Broken Access Control in Profile Edit Endpoint
OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.0.4 have a broken access control in the Profile Edit endpoint. An authenticated normal user can modify the request parameters pubpid / pid to reference another user’s recor...
WordPress HAPPY plugin <= 1.0.8 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin HAPPY versions = 1.0.8...
WordPress Leadpages plugin <= 1.1.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by NumeX in WordPress Plugin Leadpages versions = 1.1.3...