13693 matches found
WordPress Hub Theme <= 1.2.12 is vulnerable to Broken Access Control
Software Hub Type Theme Vulnerable versions = 1.2.12 Fixed in N/A OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Access Control CVE CVE-2025-0951 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 57e47f19b73d Credits Lucio Sá Required...
Drupal Authenticator Login module < 2.1.8 - Authenticated Broken Access Control vulnerability
Authenticated Broken Access Control vulnerability discovered by Pierre Rudloff prudloff in WordPress Module Authenticator Login versions 2.1.8...
WordPress Info Cards Plugin <= 1.0.11 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by Denver Jackson in WordPress Plugin Info Cards versions = 1.0.11...
WordPress B Slider Plugin <= 1.1.30 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by Denver Jackson in WordPress Plugin B Slider versions = 1.1.30...
WordPress Zephyr Project Manager Plugin <= 3.3.201 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by Denver Jackson in WordPress Plugin Zephyr Project Manager versions = 3.3.201...
WordPress All Bootstrap Blocks Plugin <= 1.3.28 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by Denver Jackson in WordPress Plugin All Bootstrap Blocks versions = 1.3.28...
CVE-2025-48108 WordPress School Management Plugin <= 93.2.0 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Mojoomla School Management allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects School Management: from n/a through 93.2.0...
CVE-2025-48108 WordPress School Management Plugin <= 93.2.0 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Mojoomla School Management allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects School Management: from n/a through 93.2.0...
WordPress Tourfic plugin <= 2.14.5 - Missing Authorization in Multiple Functions vulnerability
Missing Authorization in Multiple Functions vulnerability discovered by WordFence in WordPress Plugin Tourfic versions = 2.14.5...
WordPress Page Manager for Elementor Plugin <= 2.0.5 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by theviper17 in WordPress Plugin Page Manager for Elementor versions = 2.0.5...
WordPress miniOrange's Google Authenticator Plugin <= 6.1.1 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin miniOrange's Google Authenticator versions = 6.1.1...
WordPress Ai Image Alt Text Generator for WP Plugin <= 1.1.5 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by Bao BlueRock in WordPress Plugin Ai Image Alt Text Generator for WP versions = 1.1.5...
WordPress WP Filter & Combine RSS Feeds plugin <= 0.4 - Missing Authorization to Authenticated (Contributor+) Feed Deletion vulnerability
Missing Authorization to Authenticated Contributor+ Feed Deletion vulnerability discovered by ch4r0n in WordPress Plugin WP Filter & Combine RSS Feeds versions = 0.4...
WordPress Ni WooCommerce Customer Product Report plugin <= 1.2.4 - Missing Authorization to Authenticated (Subscriber+) Settings Update vulnerability
Missing Authorization to Authenticated Subscriber+ Settings Update vulnerability discovered by ch4r0n in WordPress Plugin Ni WooCommerce Customer Product Report versions = 1.2.4...
WordPress WC Plus plugin <= 1.2.0 - Missing Authorization to Unauthenticated Settings Manipulation vulnerability
Missing Authorization to Unauthenticated Settings Manipulation vulnerability discovered by ch4r0n in WordPress Plugin WC Plus versions = 1.2.0...
WordPress IDonatePro plugin <= 2.1.11 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin IDonatePro versions = 2.1.11...
UnoPim has Broken Access Control
Summary In Unopim, it is possible to create roles and choose the privileges. However, users without the “Delete” privilege for Products cannot delete a single product via the standard endpoint expected behavior, but can still delete products via the mass-delete endpoint, even when the request...
GHSA-8P2F-FX4Q-75CX UnoPim has Broken Access Control
Summary In Unopim, it is possible to create roles and choose the privileges. However, users without the “Delete” privilege for Products cannot delete a single product via the standard endpoint expected behavior, but can still delete products via the mass-delete endpoint, even when the request...