CVE-2025-58603 WordPress Surfer Plugin <= 1.6.4.574 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfer: from n/a through = 1.6.4.574...

CVE-2025-58600

CVE-2025-58600 affects the WordPress plugin Paid Membership Subscriptions (Cozmoslabs) up to version 2.15.9, with a Missing Authorization/Broken Access Control flaw. CVSS3.1 metrics: AV:N, AC:L, PR:N, UI:N, S:U, C:N, I:N, A:L; base score 5.3 (Medium). Attack surface is networked, requires no priv...

CVE-2025-58600 WordPress Paid Member Subscriptions Plugin <= 2.15.9 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Member Subscriptions: from n/a through = 2.15.9...

CVE-2025-58600 WordPress Paid Member Subscriptions Plugin <= 2.15.9 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Member Subscriptions: from n/a through = 2.15.9...

CVE-2025-58601

CVE-2025-58601 affects the WordPress Classified Listing Plugin (RadiusTheme)

CVE-2025-58599 WordPress Order Delivery Date for WooCommerce Plugin <= 4.1.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in tychesoftwares Order Delivery Date for WooCommerce order-delivery-date-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Delivery Date for WooCommerce: from n/a through = 4.1.0...

CVE-2025-58599 WordPress Order Delivery Date for WooCommerce Plugin <= 4.1.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in tychesoftwares Order Delivery Date for WooCommerce order-delivery-date-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Delivery Date for WooCommerce: from n/a through = 4.1.0...

CVE-2025-58599

CVE-2025-58599 corresponds to a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin “Order Delivery Date for WooCommerce” (versions

CVE-2025-58594 WordPress Brizy Plugin <= 2.7.12 - Broken Access Control Vulnerability

Missing Authorization vulnerability in themefusecom Brizy brizy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brizy: from n/a through = 2.7.12...

CVE-2025-58594 WordPress Brizy Plugin <= 2.7.12 - Broken Access Control Vulnerability

Missing Authorization vulnerability in themefusecom Brizy brizy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brizy: from n/a through = 2.7.12...

CVE-2025-3701

CVE-2025-3701 affects the WordPress plugin “Malcure Malware Scanner” (versions up to 16.8). The issue is a Missing Authorization vulnerability caused by incorrectly configured access control, enabling unauthorized access or actions. CVSSv3 base score is 4.3 (Medium). Public sources indicate the v...

CVE-2025-3701 WordPress Malcure Malware Scanner plugin <= 16.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Malcure Web Security Malcure Malware Scanner wp-malware-removal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Malcure Malware Scanner: from n/a through = 16.8...

CVE-2025-3701 WordPress Malcure Malware Scanner plugin <= 16.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Malcure Web Security Malcure Malware Scanner allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Malcure Malware Scanner: from n/a through 16.8...

WordPress Malcure Malware Scanner plugin <= 16.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by domiee13 Patchstack Alliance in WordPress Plugin Malcure Malware Scanner versions = 16.8...

WordPress MasterStudy LMS plugin <= 3.6.15 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by 0xd4rk5id3 in WordPress Plugin MasterStudy LMS versions = 3.6.15...

CVE-2025-58210 WordPress Makeaholic Theme <= 1.8.5 - Broken Access Control Vulnerability

Missing Authorization vulnerability in ThemeMove Makeaholic makeaholic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Makeaholic: from n/a through = 1.8.5...

WordPress SaasLauncher Theme <= 1.3.0 is vulnerable to Broken Access Control

Software SaasLauncher Type Theme Vulnerable versions = 1.3.0 Fixed in 1.3.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2025-58606 Patch priority Low CVSS severity Low 5 Developer Claim ownership PSID 64c990d710df Credits Denver Jackson Required privilege...

WordPress Post SMTP plugin <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Option Update vulnerability

Missing Authorization to Authenticated Subscriber+ Limited Plugin Option Update vulnerability discovered by WordFence in WordPress Plugin Post SMTP versions = 3.4.1...

WordPress PostX plugin <= 4.1.36 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Abu Hurayra in WordPress Plugin PostX versions = 4.1.36...

CVE-2024-32832 WordPress Login with Phone Number plugin <= 1.6.93 - Broken Access Control vulnerability

Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through = 1.6.93...