CVE-2025-57907 WordPress Heureka Plugin <= 1.1.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Heureka Group Heureka allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Heureka: from n/a through 1.1.0...

CVE-2025-57909

CVE-2025-57909 affects Editor Custom Color Palette (Rouergue Création) for WordPress, with a Missing Authorization flaw in versions

CVE-2025-57917 WordPress Printcart Web to Print Product Designer for WooCommerce plugin <= 2.4.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in printcart Printcart Web to Print Product Designer for WooCommerce printcart-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Printcart Web to Print Product Designer for WooCommerce: from n/a through = 2.4...

CVE-2025-57917

CVE-2025-57917 : Printcart Web to Print Product Designer for WooCommerce has a Missing Authorization flaw affecting versions from n/a through 2.4.3. Public details explicitly note Missing Authorization with an impact on access control, enabling to update arbitrary options via the wcmlim_settings_...

CVE-2025-57917 WordPress Printcart Web to Print Product Designer for WooCommerce plugin <= 2.4.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in printcart Printcart Web to Print Product Designer for WooCommerce printcart-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Printcart Web to Print Product Designer for WooCommerce: from n/a through = 2.4...

CVE-2025-57921 WordPress Frontend File Manager plugin <= 23.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through = 23.3...

CVE-2025-57921 WordPress Frontend File Manager plugin <= 23.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through = 23.3...

CVE-2025-57936 WordPress Subresource Integrity (SRI) Manager Plugin <= 0.4.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Meitar Subresource Integrity SRI Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Subresource Integrity SRI Manager: from n/a through 0.4.0...

CVE-2025-57939

CVE-2025-57939 corresponds to a Missing Authorization vulnerability in the Image Hover Effects – Elementor Addon. According to the provided data, the issue affects Image Hover Effects – Elementor Addon version up to and including 1.4.4, and the patch status is Unpatched. The Connected Wordfence v...

CVE-2025-57939 WordPress Image Hover Effects – Elementor Addon Plugin <= 1.4.4 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Blocksera Image Hover Effects – Elementor Addon allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Image Hover Effects – Elementor Addon: from n/a through 1.4.4...

CVE-2025-57944 WordPress Skimlinks Affiliate Marketing Tool Plugin <= 1.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Skimlinks Skimlinks Affiliate Marketing Tool allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Skimlinks Affiliate Marketing Tool: from n/a through 1.3...

CVE-2025-57944 WordPress Skimlinks Affiliate Marketing Tool plugin <= 1.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Skimlinks Skimlinks Affiliate Marketing Tool skimlinks allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Skimlinks Affiliate Marketing Tool: from n/a through = 1.3...

CVE-2025-57949 WordPress Ongkoskirim.id Plugin <= 1.0.6 - Broken Access Control Vulnerability

Missing Authorization vulnerability in oggix Ongkoskirim.id ongkoskirim-id allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ongkoskirim.id: from n/a through = 1.0.6...

CVE-2025-57949 WordPress Ongkoskirim.id Plugin <= 1.0.6 - Broken Access Control Vulnerability

Missing Authorization vulnerability in oggix Ongkoskirim.id ongkoskirim-id allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ongkoskirim.id: from n/a through = 1.0.6...

CVE-2025-57949

CVE-2025-57949 describes a Missing Authorization vulnerability in the Ongkos Kirim JNE Tiki Sicepat Wahana J&T POS for WooCommerce plugin (Ongkoskirim-id). Affected range: n/a to 1.0.6. The issue relates to broken access control enabling unauthorized updates to shipping options, per the Initial D...

CVE-2025-57955

CVE-2025-57955 describes a Missing Authorization vulnerability in the WordPress plugin Post Carousel Slider for Elementor . Affected version range is listed as “from n/a through 1.7.0” and the CVE entry indicates the vulnerability status is Unpatched . The accompanying CVSS vector (AV:N/AC:L/PR:L...

CVE-2025-57955 WordPress Post Carousel Slider for Elementor Plugin <= 1.7.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Plugin Devs Post Carousel Slider for Elementor post-carousel-slider-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Carousel Slider for Elementor: from n/a through = 1.7.0...

CVE-2025-57955 WordPress Post Carousel Slider for Elementor Plugin <= 1.7.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Plugin Devs Post Carousel Slider for Elementor post-carousel-slider-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Carousel Slider for Elementor: from n/a through = 1.7.0...

CVE-2025-57958

CVE-2025-57958 is described as a Missing Authorization issue in WPXPO WowAddons affecting WowAddons up to version 1.0.17. The Initial Description lists the patch status as Unpatched. No Connected documents with technical details are provided.

CVE-2025-57957 WordPress WooMS Plugin <= 9.12 - Broken Access Control Vulnerability

Missing Authorization vulnerability in wpcraft WooMS wooms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooMS: from n/a through = 9.12...