CVE-2025-66128 WordPress Sendinblue for WooCommerce plugin <= 4.0.49 - Broken Access Control vulnerability

Missing Authorization vulnerability in Brevo Sendinblue for WooCommerce woocommerce-sendinblue-newsletter-subscription allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sendinblue for WooCommerce: from n/a through = 4.0.49...

CVE-2025-66128

CVE-2025-66128 is a published Missing Authorization vulnerability affecting the Brevo (Sendinblue) for WooCommerce plugin for WordPress. Affected software: Sendinblue for WooCommerce (woocommerce-sendinblue-newsletter-subscription) up to version 4.0.49. Root cause per sources: broken/misconfigure...

CVE-2025-66120 WordPress CatFolders plugin <= 2.5.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in CatFolders CatFolders catfolders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CatFolders: from n/a through = 2.5.3...

CVE-2025-64639

CVE-2025-64639 is a Missing Authorization vulnerability in the WordPress plugin WP Compress for MainWP. Affected: WP Compress for MainWP versions through 6.50.07. Root cause: incorrectly configured access control security levels enabling unauthorized access. CVSSv3.1 base score 5.3 (Network, Low ...

CVE-2025-66121 WordPress SiteGround Security plugin <= 1.5.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in SiteGround SiteGround Security sg-security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteGround Security: from n/a through = 1.5.8...

CVE-2025-66124

CVE-2025-66124: WordPress Leaky Paywall plugin (ZEEN101 Leaky Paywall)

CVE-2025-66122 WordPress Stylish Price List plugin <= 7.2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Design Stylish Price List stylish-price-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stylish Price List: from n/a through = 7.2.2...

CVE-2025-66121 WordPress SiteGround Security plugin <= 1.5.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in SiteGround SiteGround Security sg-security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteGround Security: from n/a through = 1.5.8...

CVE-2025-66120

CVE-2025-66120 corresponds to a Missing Authorization/Broken Access Control vulnerability in the WordPress CatFolders plugin (versions up to and including 2.5.3). The issue affects CatFolders – WordPress Media Library Folders & Categories, with a CVSS v3.1 base score of 5.3 (Medium) and an attack...

CVE-2025-66122 WordPress Stylish Price List plugin <= 7.2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Design Stylish Price List stylish-price-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stylish Price List: from n/a through = 7.2.2...

CVE-2025-66121

CVE-2025-66121 affects the WordPress plugin SiteGround Security (sg-security) , versions up to and including 1.5.8. The issue is described as a Missing Authorization / Broken Access Control vulnerability arising from incorrectly configured access control security levels, enabling exploitation aga...

CVE-2025-66122

CVE-2025-66122 affects WordPress plugin Stylish Price List (versions up to 7.2.2). The issue is Missing Authorization / Broken Access Control, enabling exploitation of improperly configured access controls. Connected sources corroborate: Red Hat and EUVD entries mirror the same description, and P...

CVE-2025-66124 WordPress Leaky Paywall plugin <= 4.22.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in ZEEN101 Leaky Paywall leaky-paywall allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Leaky Paywall: from n/a through = 4.22.6...

CVE-2025-64635

CVE-2025-64635 affects the WordPress plugin Feeds for YouTube (Syed Balkhi Feeds for YouTube) up to version 2.4.0. The issue is a Missing Authorization vulnerability due to incorrectly configured access control security levels, allowing unauthorized access as described in multiple sources. Impact...

CVE-2025-64638 WordPress OnPay.io for WooCommerce plugin <= 1.0.47 - Broken Access Control vulnerability

Missing Authorization vulnerability in OnPay.io OnPay.io for WooCommerce onpay-io-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OnPay.io for WooCommerce: from n/a through = 1.0.47...

CVE-2025-64638 WordPress OnPay.io for WooCommerce plugin <= 1.0.47 - Broken Access Control vulnerability

Missing Authorization vulnerability in OnPay.io OnPay.io for WooCommerce onpay-io-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OnPay.io for WooCommerce: from n/a through = 1.0.47...

CVE-2025-64635 WordPress Feeds for YouTube plugin <= 2.4.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Syed Balkhi Feeds for YouTube feeds-for-youtube allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Feeds for YouTube: from n/a through = 2.4.0...

CVE-2025-64634 WordPress Avada theme <= 7.13.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeFusion Avada avada allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Avada: from n/a through = 7.13.2...

CVE-2025-64634 WordPress Avada theme <= 7.13.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeFusion Avada avada allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Avada: from n/a through = 7.13.2...

CVE-2025-64631 WordPress WCFM Marketplace plugin <= 3.7.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCFM Marketplace: from n/a through = 3.7.1...