CVE-2025-39535 WordPress Vitepos plugin <= 3.1.7 - Broken Authentication Vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in appsbd Vitepos vitepos-lite allows Authentication Abuse.This issue affects Vitepos: from n/a through = 3.1.7...

CVE-2025-39535 WordPress Vitepos <= 3.1.7 - Broken Authentication Vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in appsbd Vitepos allows Authentication Abuse. This issue affects Vitepos: from n/a through 3.1.7...

CVE-2025-39535

Summary: CVE-2025-39535 describes an authentication bypass in WordPress Vitepos (Vitepos-lite) versions up to 3.1.7, enabling authentication abuse via an alternate path or channel. The issue is rated CVSSv3.1 base score 7.2 (Network attack vector, Low attack complexity, Privileges required: High,...

WordPress Vitepos plugin <= 3.1.7 - Broken Authentication Vulnerability

Broken Authentication Vulnerability discovered by astra.r3verii in WordPress Plugin Vitepos versions = 3.1.7...

WordPress Paid Videochat Turnkey Site plugin <= 7.3.11 - Broken Authentication Vulnerability

Broken Authentication Vulnerability discovered by LVT-tholv2k in WordPress Plugin Paid Videochat Turnkey Site versions = 7.3.11...

CVE-2025-31381 WordPress Booking Calendar and Notification plugin <= 4.0.3 - Broken Authentication vulnerability

Missing Authorization vulnerability in shiptrack Booking Calendar and Notification booking-calendar-and-notification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking Calendar and Notification: from n/a through = 4.0.3...

CVE-2025-31381

CVE-2025-31381 describes a Missing Authorization (authentication bypass) vulnerability in the Booking Calendar and Notification WordPress plugin, affecting versions up to 4.0.3. Primary documentation lists this as a Missing Authorization issue with a CVSS v3.1 base score of 6.5 (Network access, n...

CVE-2025-31381 WordPress Booking Calendar and Notification plugin <= 4.0.3 - Broken Authentication vulnerability

Missing Authorization vulnerability in shiptrack Booking Calendar and Notification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking Calendar and Notification: from n/a through 4.0.3...

WordPress Booking Calendar and Notification plugin <= 4.0.3 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Pham Van Tam Patchstack Alliance in WordPress Plugin Booking Calendar and Notification versions = 4.0.3...

CVE-2025-30853 WordPress ShortPixel Adaptive Images plugin <= 3.10.0 - Broken Authentication vulnerability

Missing Authorization vulnerability in ShortPixel ShortPixel Adaptive Images shortpixel-adaptive-images allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShortPixel Adaptive Images: from n/a through = 3.10.0...

CVE-2025-30853

Technical details about CVE-2025-30853 are not provided in the supplied documents. No confirmed affected versions, impact, exploits, or remediation are included; monitor for official advisories and vendor updates.

CVE-2025-30853 WordPress ShortPixel Adaptive Images plugin <= 3.10.0 - Broken Authentication vulnerability

Missing Authorization vulnerability in ShortPixel ShortPixel Adaptive Images shortpixel-adaptive-images allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShortPixel Adaptive Images: from n/a through = 3.10.0...

WordPress User Registration & Membership Pro plugin < 5.1.3 - Authentication Bypass vulnerability

Authentication Bypass vulnerability discovered by wesley wcraft in WordPress Plugin User Registration & Membership Pro versions 5.1.3...

WordPress User Registration plugin < 4.1.3 - Authentication Bypass vulnerability

Authentication Bypass vulnerability discovered by wesley wcraft in WordPress Plugin User Registration versions 4.1.3...

WordPress ShortPixel Adaptive Images plugin <= 3.10.0 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Peter Thaleikis in WordPress Plugin ShortPixel Adaptive Images versions = 3.10.0...

CVE-2025-22277 WordPress Vitepos plugin <= 3.1.4 - Broken Authentication vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in appsbd Vitepos vitepos-lite allows Authentication Abuse.This issue affects Vitepos: from n/a through = 3.1.4...

CVE-2025-22277

CVE-2025-22277 affects the Vitepos POS plugin for WooCommerce (appsbd). The connected data confirms a Missing Authorization flaw that enables authentication bypass/abuse via an alternate path or channel, affecting Vitepos versions up to 3.1.4. The record notes a patch has been applied (Patch Stat...

CVE-2025-22277 WordPress Vitepos plugin <= 3.1.4 - Broken Authentication vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in appsbd Vitepos vitepos-lite allows Authentication Abuse.This issue affects Vitepos: from n/a through = 3.1.4...

WordPress Vitepos plugin <= 3.1.4 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Phat RiO - Fore-Z co.ltd in WordPress Plugin Vitepos versions = 3.1.4...

CVE-2025-30361 WeGIA Vulnerable to Broken Authentication - Old Password Validation

WeGIA is a Web manager for charitable institutions. A security vulnerability was identified in versions prior to 3.2.6, where it is possible to change a user's password without verifying the old password. This issue exists in the control.php endpoint and allows unauthorized attackers to bypass...