Lucene search
+L

13587 matches found

Cvelist
Cvelist
added 2025/10/27 1:34 a.m.21 views

CVE-2025-62976 WordPress Sendle Shipping plugin <= 6.02 - Broken Access Control vulnerability

Missing Authorization vulnerability in Joovii Sendle Shipping official-sendle-shipping-method allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Sendle Shipping: from n/a through = 6.02...

5.3CVSS0.00262EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/27 1:34 a.m.15 views

CVE-2025-62973 WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through = 2.9.0...

5.3CVSS0.00216EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/27 1:34 a.m.27 views

CVE-2025-62972

The CVE CVE-2025-62972 affects the WordPress WebinarPress (WPWebinarSystem) plugin up to version 1.33.28 and is described as a Missing Authorization/Broken Access Control vulnerability. Multiple sources (NVD, Red Hat, CIRCL, CIR cl, CVE lists) corroborate the issue as affecting WebinarPress with ...

4.3CVSS6.6AI score0.00254EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/27 1:34 a.m.4 views

CVE-2025-62973 WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through = 2.9.0...

5.3CVSS6.6AI score0.00216EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/27 1:34 a.m.25 views

CVE-2025-62972 WordPress WebinarPress plugin <= 1.33.28 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebinarPress: from n/a through = 1.33.28...

4.3CVSS0.00254EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/27 1:34 a.m.24 views

CVE-2025-62973

CVE-2025-62973 is a Missing Authorization / Broken Access Control vulnerability in Themekraft BuddyForms WordPress plugin, affecting BuddyForms versions from the earliest through 2.9.0. The issue allows Accessing Functionality Not Properly Constrained by ACLs. Public records (NVD, Red Hat, CIRCL,...

5.3CVSS6.6AI score0.00216EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/10/27 1:34 a.m.28 views

CVE-2025-62970 WordPress Link Whisper Free plugin <= 0.9.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Spencer Haws Link Whisper Free link-whisper allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Link Whisper Free: from n/a through = 0.9.2...

5.3CVSS0.00205EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/27 1:34 a.m.25 views

CVE-2025-62970

CVE-2025-62970 concerns a Missing Authorization vulnerability in the WordPress plugin Link Whisper Free . Multiple sources (NVD, Red Hat, EUVD, CIRCL, CVE lists, Patchstack) describe it as exploitable via an incorrectly configured access control on the Link Whisper Free plugin (versions up to at ...

5.3CVSS5.9AI score0.00205EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/27 1:34 a.m.5 views

CVE-2025-62970 WordPress Link Whisper Free plugin <= 0.9.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Spencer Haws Link Whisper Free link-whisper allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Link Whisper Free: from n/a through = 0.9.2...

5.3CVSS5.1AI score0.00205EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/27 1:34 a.m.18 views

CVE-2025-62965 WordPress Admin Management Xtended plugin <= 2.5.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in wpseek Admin Management Xtended admin-management-xtended allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Admin Management Xtended : from n/a through = 2.5.1...

5.5CVSS0.00185EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/27 1:34 a.m.19 views

CVE-2025-62966 WordPress GoCache plugin <= 1.3.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in Apiki GoCache gocache-cdn allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GoCache: from n/a through = 1.3.6...

5.4CVSS0.00203EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/27 1:34 a.m.1 views

CVE-2025-62966 WordPress GoCache plugin <= 1.3.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in Apiki GoCache gocache-cdn allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GoCache: from n/a through = 1.3.6...

5.4CVSS6.6AI score0.00203EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/27 1:34 a.m.33 views

CVE-2025-62965

CVE-2025-62965 is a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin Admin Management Xtended, affecting versions up to and including 2.5.1. The issue arises from ‘incorrectly configured access control security levels’, enabling unauthorized users to exploit pri...

5.5CVSS6.6AI score0.00185EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/27 1:34 a.m.23 views

CVE-2025-62966

CVE-2025-62966 : Affected software is the WordPress GoCache plugin (GoCache CDN) version

5.4CVSS6.6AI score0.00203EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/27 1:34 a.m.3 views

CVE-2025-62965 WordPress Admin Management Xtended plugin <= 2.5.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in wpseek Admin Management Xtended admin-management-xtended allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Admin Management Xtended : from n/a through = 2.5.1...

5.5CVSS6.6AI score0.00185EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/27 1:34 a.m.5 views

CVE-2025-62964 WordPress MDTF plugin <= 1.3.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MDTF: from n/a through = 1.3.6...

5.3CVSS5.1AI score0.00205EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/27 1:34 a.m.23 views

CVE-2025-62964 WordPress MDTF plugin <= 1.3.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MDTF: from n/a through = 1.3.6...

5.3CVSS0.00205EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/27 1:34 a.m.25 views

CVE-2025-62964

CVE-2025-62964 refers to a Missing Authorization vulnerability in the WordPress plugin MDTF (RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter). Connected sources indicate the flaw affects MDTF versions up to 1.3.6 (and possibly earlier) and arises from broken access control/security level ...

5.3CVSS5.9AI score0.00205EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/27 1:34 a.m.30 views

CVE-2025-62954 WordPress Revive Old Posts plugin <= 9.3.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in rsocial Revive Old Posts tweet-old-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Revive Old Posts: from n/a through = 9.3.3...

4.3CVSS0.00222EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/27 1:34 a.m.6 views

CVE-2025-62954 WordPress Revive Old Posts plugin <= 9.3.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in rsocial Revive Old Posts tweet-old-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Revive Old Posts: from n/a through = 9.3.3...

4.3CVSS5.1AI score0.00222EPSS
SaveExploits0References1
Rows per page
Query Builder