WordPress Wide Banner plugin <= 1.0.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Wide Banner versions = 1.0.4...

WordPress Blaze Demo Importer plugin <= 1.0.12 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install vulnerability

Missing Authorization to Authenticated Subscriber+ Limited Plugin Install vulnerability discovered by wesley wcraft in WordPress Plugin Blaze Demo Importer versions = 1.0.12...

WordPress Accordion plugin <= 2.3.14 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Abu Hurayra in WordPress Plugin Accordion versions = 2.3.14...

WordPress The Events Calendar plugin <= 6.15.2 - Missing Authorization to Unauthenticated Password-Protected Information Disclosure vulnerability

Missing Authorization to Unauthenticated Password-Protected Information Disclosure vulnerability discovered by Miguel Santareno in WordPress Plugin The Events Calendar versions = 6.15.2...

WordPress WPLMS plugin <= 1.9.9.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin WPLMS versions = 1.9.9.7...

WordPress ListingPro theme < 2.9.10 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme ListingPro versions 2.9.10...

WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.4.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by ? in WordPress Plugin Recipe Card Blocks for Gutenberg & Elementor versions = 3.4.8...

WordPress Time Tracker plugin <= 3.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update and Limited Data Deletion vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Options Update and Limited Data Deletion vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Time Tracker versions = 3.1.0...

WordPress My WP Translate plugin <= 1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Options Update vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin My WP Translate versions = 1.1...

WordPress My WP Translate plugin <= 1.1 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Option Read and Deletion vulnerability

Authenticated Subscriber+ Missing Authorization to Arbitrary Option Read and Deletion vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin My WP Translate versions = 1.1...

WordPress Ultimate Classified Listings plugin <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update vulnerability

Missing Authorization to Authenticated Subscriber+ Plugin Settings Update vulnerability discovered by Ivan Kuzymchak in WordPress Plugin Ultimate Classified Listings versions = 1.6...

WordPress XStore theme < 9.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme XStore versions 9.6...

WordPress NitroPack plugin <= 1.18.4 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update via nitropack_set_compression_ajax Function vulnerability

Missing Authorization to Authenticated Subscriber+ Limited Settings Update via nitropacksetcompressionajax Function vulnerability discovered by Peter Thaleikis in WordPress Plugin NitroPack versions = 1.18.4...

WordPress Maspik plugin <= 2.5.6 - Authenticated (Subscriber+) Missing Authorization to Spam Log Export vulnerability

Authenticated Subscriber+ Missing Authorization to Spam Log Export vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Maspik – Spam blacklist versions = 2.5.6...

WordPress Accessibility Checker by Equalize Digital Plugin <= 1.31.0 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Certus Cybersecurity in WordPress Plugin Accessibility Checker by Equalize Digital versions = 1.31.0...

WordPress PDF Generator for WordPress Plugin <= 1.5.4 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Tran Hoang Tuan Kiet in WordPress Plugin PDF Generator for WordPress versions = 1.5.4...

WordPress BerqWP Plugin <= 2.2.53 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Bao - BlueRock in WordPress Plugin BerqWP versions = 2.2.53...

WordPress Export WP Page to Static HTML/CSS Plugin <= 4.1.0 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Bao - BlueRock in WordPress Plugin Export WP Page to Static HTML/CSS versions = 4.1.0...

WordPress Accessibility Checker by Equalize Digital Plugin <= 1.31.0 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Certus Cybersecurity in WordPress Plugin Accessibility Checker by Equalize Digital versions = 1.31.0...

CVE-2025-58976 WordPress Accessibility Checker by Equalize Digital Plugin <= 1.31.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Equalize Digital Accessibility Checker by Equalize Digital allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Accessibility Checker by Equalize Digital: from n/a through 1.31.0...