13816 matches found
CVE-2025-30926
CVE-2025-30926 – Missing Authorization in King Addons for Elementor (King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor). Affected versions: up to 24.12.58. The entry is marked as patched; no exploit details are provided in the initial documents. Recommended...
CVE-2025-30926 WordPress King Addons for Elementor plugin <= 24.12.58 - Broken Access Control Vulnerability
Missing Authorization vulnerability in KingAddons.com King Addons for Elementor king-addons.This issue affects King Addons for Elementor: from n/a through = 24.12.58...
CVE-2025-30880 WordPress JS Help Desk plugin <= 2.9.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through = 2.9.2...
CVE-2025-30880 WordPress JS Help Desk plugin <= 2.9.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through = 2.9.2...
CVE-2025-30880
CVE-2025-30880 : In the WordPress plugin "JS Help Desk – The Ultimate Help Desk & Support Plugin", a missing/incorrectly configured authorization issue is cited as a vulnerability. The CVSS 3.1 vector indicates an unauthenticated network attack with high impact on availability (base score 7.5, HI...
CVE-2025-30797 WordPress Greek Multi Tool – Fix peralinks, accents, auto create menus and more plugin <= 2.3.1 - Broken Access Control Vulnerability
Missing Authorization vulnerability in bigdrop.gr Greek Multi Tool – Fix peralinks, accents, auto create menus and more greek-multi-tool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Greek Multi Tool – Fix peralinks, accents, auto create menus and more...
PT-2025-14370 · Nagios · Nagios Network Analyzer
Name of the Vulnerable Software and Affected Versions: Nagios Network Analyzer version 2024R1.0.3 Description: A Broken Access Control issue allows low-privilege users with "Read-Only" access to perform administrative actions, including stopping system services and deleting critical resources. Th...
CVE-2025-28131
CVE-2025-28131 concerns a Broken Access Control in Nagios Network Analyzer 2024R1.0.3. Multiple sources describe that low-privilege users with Read-Only access can perform administrative actions (e.g., stopping system services and deleting critical resources) due to improper authorization enforce...
CVE-2025-28131
A Broken Access Control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows low-privilege users with "Read-Only" access to perform administrative actions, including stopping system services and deleting critical resources. This flaw arises due to improper authorization enforcement, enablin...
WordPress YayExtra <= 1.5.2 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by theviper17 Patchstack Alliance in WordPress Plugin YayExtra versions = 1.5.2...
WordPress Ni WooCommerce Product Enquiry plugin <= 4.1.8 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Mika in WordPress Plugin Ni WooCommerce Product Enquiry versions = 4.1.8...
WordPress Sliced Invoices plugin <= 3.10.0 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by Manab Jyoti Dowarah in WordPress Plugin Sliced Invoices versions = 3.10.0...
WordPress Useinfluence plugin <= 1.0.8 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by SOPROBRO in WordPress Plugin Useinfluence versions = 1.0.8...
WordPress Connector to CiviCRM with CiviMcRestFace plugin <= 1.0.10 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Mika in WordPress Plugin Connector to CiviCRM with CiviMcRestFace versions = 1.0.10...
WordPress Auto Post After Image Upload plugin <= 1.6 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Mika in WordPress Plugin Auto Post After Image Upload versions = 1.6...
WordPress Chat by Chatwee plugin <= 2.1.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Mika in WordPress Plugin Chat by Chatwee versions = 2.1.3...
WordPress PostmarkApp Email Integrator plugin <= 2.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Mika in WordPress Plugin PostmarkApp Email Integrator versions = 2.4...
WordPress ContentMX Content Publisher plugin <= 1.0.6 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin ContentMX Content Publisher versions = 1.0.6...
WordPress Swiss Toolkit For WP plugin <= 1.4.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Peter Thaleikis in WordPress Plugin Swiss Toolkit For WP versions = 1.4.0...
WordPress Safe Ai Malware Protection for WP plugin <= 1.0.20 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Peter Thaleikis in WordPress Plugin Safe Ai Malware Protection for WP versions = 1.0.20...