WordPress Audio Editor & Recorder plugin <= 2.2.3 - Sensitive Data Exposure Vulnerability

Sensitive Data Exposure Vulnerability discovered by Martino Spagnuolo r3verii in WordPress Plugin Audio Editor & Recorder versions = 2.2.3...

WordPress ChatBot plugin <= 6.7.3 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by zaim in WordPress Plugin ChatBot versions = 6.7.3...

CVE-2025-53323 WordPress Pre-Publish Post Checklist plugin <= 3.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in danbriapps Pre-Publish Post Checklist pre-publish-post-checklist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pre-Publish Post Checklist: from n/a through = 3.1...

CVE-2025-53318

CVE-2025-53318 (WP DB Booster) : A Missing Authorization vulnerability in the WordPress plugin WP DB Booster (affected versions: from n/a through 1.0.1) allows exploitation of incorrectly configured access control security levels. Connected sources consistently identify it as a missing/weak autho...

CVE-2025-53318 WordPress WP DB Booster plugin <= 1.0.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in WPManiax WP DB Booster wp-db-booster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP DB Booster: from n/a through = 1.0.1...

CVE-2025-53318 WordPress WP DB Booster plugin <= 1.0.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in WPManiax WP DB Booster wp-db-booster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP DB Booster: from n/a through = 1.0.1...

CVE-2025-53304 WordPress Contact Form – 7 : Hide Success Message plugin <= 1.1.4 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Rohil Contact Form – 7 : Hide Success Message contact-form-7-hide-success-message allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Contact Form – 7 : Hide Success Message: from n/a through = 1.1.4...

CVE-2025-53304

CVE-2025-53304 concerns the WordPress plugin “Contact Form – 7: Hide Success Message.” It affects versions up to 1.1.4 and is described as a Missing Authorization vulnerability that allows accessing functionality not properly constrained by ACLs. The CVE entry indicates a base score of 5.3 (Mediu...

CVE-2025-53295 WordPress iCount Payment Gateway plugin <= 2.0.6 - Broken Access Control Vulnerability

Missing Authorization vulnerability in iCount iCount Payment Gateway allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects iCount Payment Gateway: from n/a through 2.0.6...

CVE-2025-53293

CVE-2025-53293 affects the WordPress Dashboard Widget Sidebar plugin (versions up to 1.2.3). The issue is a Missing Authorization vulnerability caused by misconfigured access control, allowing unauthorized access to protected resources. Public details in the provided documents identify the compon...

CVE-2025-53288

CVE-2025-53288 corresponds to a Missing Authorization vulnerability in the WordPress plugin “PlatiOnline Payments” (versions up to 6.3.2). The issue arises from misconfigured access control, enabling unauthorized access due to insufficient authorization checks. Public details in Patchstack/Red Ha...

CVE-2025-53288 WordPress PlatiOnline Payments plugin <= 7.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Adrian Ladó PlatiOnline Payments plationline allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PlatiOnline Payments: from n/a through = 7.0.0...

CVE-2025-53284

CVE-2025-53284 : Missing Authorization vulnerability in the WordPress plugin CMS Blocks (versions n/a–1.1) due to incorrectly configured access control. This may allow an attacker with low privileges to access restricted resources over the network, with high impact on confidentiality but no state...

CVE-2025-53284 WordPress CMS Blocks plugin <= 1.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in pankaj.sakaria CMS Blocks cms-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CMS Blocks: from n/a through = 1.1...

CVE-2025-53266 WordPress Cron Logger plugin <= 1.3.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in EdwardBock Cron Logger cron-logger allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cron Logger: from n/a through = 1.3.0...

CVE-2025-53255 WordPress HurryTimer plugin <= 2.13.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Nabil Lemsieh HurryTimer hurrytimer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HurryTimer: from n/a through = 2.13.1...

CVE-2025-53255 WordPress HurryTimer plugin <= 2.13.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Nabil Lemsieh HurryTimer allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects HurryTimer: from n/a through 2.13.1...

CVE-2025-52817

The CVE refers to the WordPress plugin Abandoned Contact Form 7 (versions n/a through 2.0) with a Missing Authorization / Broken Access Control vulnerability. Affected component is the plugin’s access control configuration, enabling exploitation due to incorrectly configured access levels. CVSS/m...

CVE-2025-52817 WordPress Abandoned Contact Form 7 plugin <= 2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in ZealousWeb Abandoned Contact Form 7 abandoned-contact-form-7 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Abandoned Contact Form 7: from n/a through = 2.2...

CVE-2025-52818 WordPress Trusty Whistleblowing plugin <= 1.5.2 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Dejan Jasnic Trusty Whistleblowing allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Trusty Whistleblowing: from n/a through 1.5.2...