15469 matches found
WordPress Team Builder plugin <= 1.5.7 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Team Builder versions = 1.5.7...
WordPress InWave Jobs Plugin <= 3.5.8 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Mohamed Ali - @0vulns / 0Bytes Security in WordPress Plugin InWave Jobs versions = 3.5.8...
CVE-2025-45387
osTicket prior to v1.17.6 and v1.18.2 are vulnerable to Broken Access Control Vulnerability in /scp/ajax.php...
CVE-2025-47585 WordPress Booking and Rental Manager <= 2.3.8 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Mage people team Booking and Rental Manager allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booking and Rental Manager: from n/a through 2.3.8...
CVE-2025-47585 WordPress Booking and Rental Manager plugin <= 2.3.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booking and Rental Manager: from n/a through = 2.3.8...
CVE-2025-47585
CVE-2025-47585 covers the WordPress plugin Booking and Rental Manager for WooCommerce (versions
WordPress Uncanny Automator plugin <= 6.4.0.2 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by Denver Jackson in WordPress Plugin Uncanny Automator versions = 6.4.0.2...
CVE-2025-45387
osTicket prior to v1.17.6 and v1.18.2 are vulnerable to Broken Access Control Vulnerability in /scp/ajax.php...
CVE-2025-45387: Improper Neutralization of Input During Web Page Generation
osTicket prior to v1.17.6 and v1.18.2 are vulnerable to Broken Access Control Vulnerability in /scp/ajax.php...
PT-2025-23544 · Osticket · Osticket
Name of the Vulnerable Software and Affected Versions: osTicket versions prior to 1.17.6 and prior to 1.18.2 Description: The issue is related to a Broken Access Control Vulnerability in the /scp/ajax.php endpoint. This vulnerability affects osTicket versions prior to 1.17.6 and prior to 1.18.2...
CVE-2025-45387
osTicket prior to v1.17.6 and v1.18.2 are vulnerable to Broken Access Control Vulnerability in /scp/ajax.php...
BIT-MOODLE-2024-33996 moodle: broken access control when setting calendar event type
Incorrect validation of allowed event types in a calendar web service made it possible for some users to create events with types/audiences they did not have permission to publish to...
WordPress WooCommerce Orders & Customers Exporter <= 5.0 - Sensitive Data Exposure Vulnerability
Sensitive Data Exposure Vulnerability discovered by 0xd4rk5id3 Patchstack Alliance in WordPress Plugin WooCommerce Orders & Customers Exporter versions = 5.0...
WordPress Woo Slider Pro <= 1.12 - Arbitrary Content Deletion Vulnerability
Arbitrary Content Deletion Vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Woo Slider Pro versions = 1.12...
WordPress Woo Slider Pro - Drag Drop Slider Builder For WooCommerce plugin <= 1.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion via woo_slide_pro_delete_draft_preview vulnerability
WordPress Woo Slider Pro - Drag Drop Slider Builder For WooCommerce plugin = 1.12 - Missing Authorization to Authenticated Subscriber+ Arbitrary Post Deletion via wooslideprodeletedraftpreview vulnerability discovered by Chuck in WordPress Plugin Woo Slider Pro versions = 1.12...
WordPress Featured Image Plus plugin <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Featured Image Update vulnerability
Missing Authorization to Authenticated Subscriber+ Featured Image Update vulnerability discovered by Kishan Vyas in WordPress Plugin Featured Image Plus versions = 1.6.4...
WordPress QuickCab plugin <= 1.3.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin QuickCab versions = 1.3.3...
WordPress Responsive Plus plugin <= 3.2.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by domiee13 Patchstack Alliance in WordPress Plugin Responsive Plus versions = 3.2.0...
WordPress WPeMatico RSS Feed Fetcher plugin <= 2.8.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by domiee13 in WordPress Plugin WPeMatico RSS Feed Fetcher versions = 2.8.3...