CVE-2025-31628 WordPress Sliced Invoices plugin <= 3.10.0 - Insecure Direct Object References (IDOR) vulnerability

Missing Authorization vulnerability in SlicedInvoices Sliced Invoices sliced-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sliced Invoices: from n/a through = 3.10.0...

CVE-2025-31580 WordPress Ni WooCommerce Product Enquiry plugin <= 4.1.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Anzar Ahmed Ni WooCommerce Product Enquiry allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Ni WooCommerce Product Enquiry: from n/a through 4.1.8...

CVE-2025-31580

Technical details about CVE-2025-31580 (Ni WooCommerce Product Enquiry) are not provided in the connected documents. The Initial Description notes Missing Authorization affecting ≤4.1.8, but no exploit, affected version specifics, root cause, or remediation are included here; monitor for updates.

CVE-2025-31525 WordPress WP Mobile Bottom Menu plugin <= 1.4.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Messiah WP Mobile Bottom Menu mobile-bottom-menu-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mobile Bottom Menu: from n/a through = 1.4.0...

CVE-2025-31525

Technical details for CVE-2025-31525 are not provided in the supplied connected documents. The Initial Description notes a Missing Authorization issue in WP Mobile Bottom Menu; monitor vendor advisories and patch availability for updates.

WordPress Insert Headers and Footers Code – HT Script plugin <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update vulnerability

Missing Authorization to Authenticated Subscriber+ Limited Options Update vulnerability discovered by kr0d in WordPress Plugin Insert Headers and Footers Code – HT Script versions = 1.1.2...

CVE-2025-28131

A Broken Access Control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows low-privilege users with "Read-Only" access to perform administrative actions, including stopping system services and deleting critical resources. This flaw arises due to improper authorization enforcement, enablin...

CVE-2025-28131

A Broken Access Control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows low-privilege users with "Read-Only" access to perform administrative actions, including stopping system services and deleting critical resources. This flaw arises due to improper authorization enforcement, enablin...

WordPress MyBookProgress plugin <= 1.0.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin MyBookProgress by Stormhill Media versions = 1.0.8...

WordPress Social proof testimonials and reviews by Repuso plugin <= 5.21 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Thaleikis in WordPress Plugin Social proof testimonials and reviews by Repuso versions = 5.21...

WordPress Webinar Plugin <= 1.33.28 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Thaleikis in WordPress Plugin WebinarPress versions = 1.33.28...

WordPress Pearl plugin <= 1.3.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin Pearl versions = 1.3.9...

WordPress Barcode Generator for WooCommerce plugin <= 2.0.4 - Settings Change vulnerability

Settings Change vulnerability discovered by Mika in WordPress Plugin Barcode Generator for WooCommerce versions = 2.0.4...

WordPress UPC/EAN/GTIN Code Generator plugin <= 2.0.2 - Settings Change vulnerability

Settings Change vulnerability discovered by Mika in WordPress Plugin UPC/EAN/GTIN Code Generator versions = 2.0.2...

WordPress RestroPress plugin <= 3.2.4.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin RestroPress versions = 3.2.4.2...

WordPress WP Clone any post type Plugin <= 3.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Abdi Pranata in WordPress Plugin WP Clone any post type versions = 3.6...

WordPress WP AutoKeyword plugin <= 1.0 - Arbitrary Content Deletion vulnerability

Arbitrary Content Deletion vulnerability discovered by Mika in WordPress Plugin WP AutoKeyword versions = 1.0...

WordPress JS Job Manager plugin <= 2.0.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by LVT-tholv2k in WordPress Plugin JS Job Manager versions = 2.0.2...

WordPress JS Job Manager Plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Tran Hoang Tuan Kiet in WordPress Plugin JS Job Manager versions = 2.0.2...

WordPress ShipDepot for WooCommerce plugin <= 1.2.19 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin ShipDepot for WooCommerce versions = 1.2.19...