CVE-2025-62144 WordPress Core Web Vitals & PageSpeed Booster plugin <= 1.0.27 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mohammed Kaludi Core Web Vitals & PageSpeed Booster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Core Web Vitals & PageSpeed Booster: from n/a through 1.0.27...

CVE-2025-62144

CVE-2025-62144 concerns a Missing Authorization issue in the Core Web Vitals & PageSpeed Booster plugin for WordPress (core-web-vitals-pagespeed-booster). Affected range: from n/a through 1.0.28. CVSS 3.1 base score 5.4 (Medium) with Network attack vector, Low confidentiality/integrity impact, no...

WordPress Core Web Vitals & PageSpeed Booster plugin <= 1.0.28 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Core Web Vitals & PageSpeed Booster versions = 1.0.28...

PT-2025-54372

Name of the Vulnerable Software and Affected Versions GS Portfolio for Envato versions 1.4.2 and earlier Description An unauthenticated broken access control issue exists in GS Portfolio for Envato. This allows unauthorized access to resources. Recommendations Update GS Portfolio for Envato to a...

CVE-2025-62128

Technical details for CVE-2025-62128 are not provided in the supplied documents. No confirmed affected versions, impact, or mitigations are stated here. Monitor for updates from SiteLock, WordPress security advisories, or CVE databases for precise remediation guidance.

CVE-2025-62128 WordPress SiteLock Security plugin <= 5.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in SiteLock SiteLock Security – WP Hardening, Login Security & Malware Scans sitelock allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteLock Security – WP Hardening, Login Security & Malware Scans: from n/a through =...

CVE-2025-62128 WordPress SiteLock Security plugin <= 5.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in SiteLock SiteLock Security – WP Hardening, Login Security & Malware Scans sitelock allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteLock Security – WP Hardening, Login Security & Malware Scans: from n/a through =...

WordPress SiteLock Security plugin <= 5.0.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin SiteLock Security – WP Hardening, Login Security & Malware Scans versions = 5.0.1...

CVE-2025-66080 WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.0.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent gdpr-cookie-consent allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cookie Notice for GDPR, CCPA & ePrivacy Consent: from n/a through = 4.0.3...

WordPress Ultimate Store Kit Elementor Addons plugin <= 2.9.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Ultimate Store Kit Elementor Addons versions = 2.9.4...

WordPress Registration & Login with Mobile Phone Number for WooCommerce plugin <= 1.3.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Registration & Login with Mobile Phone Number for WooCommerce versions = 1.3.1...

Using AI-Generated Images to Get Refunds

Scammers are generating images of broken merchandise in order to apply for refunds...

CVE-2025-69091 WordPress Demo Importer Plus plugin <= 2.0.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Kraft Plugins Demo Importer Plus demo-importer-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Demo Importer Plus: from n/a through = 2.0.8...

CVE-2025-69093

CVE-2025-69093 is a Missing Authorization vulnerability in the WordPress plugin ShopMagic – email automation (ShopMagic: WooCommerce) that allows improper access control. Affected: ShopMagic versions from unspecified earlier range up to

CVE-2025-69093 WordPress ShopMagic plugin <= 4.7.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in wpdesk ShopMagic shopmagic-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShopMagic: from n/a through = 4.7.2...

CVE-2025-69091

CVE-2025-69091 relates to Demo Importer Plus (WordPress plugin) and is tied to a Missing Authorization vulnerability due to incorrectly configured access control. The issue affects Demo Importer Plus versions from prior to or at 2.0.8 and is documented in Wordfence as Missing Authorization. The W...

CVE-2025-69091 WordPress Demo Importer Plus plugin <= 2.0.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Kraft Plugins Demo Importer Plus demo-importer-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Demo Importer Plus: from n/a through = 2.0.8...

CVE-2025-69031 WordPress Arcane theme <= 3.6.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in Skywarrior Arcane arcane allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Arcane: from n/a through = 3.6.6...

CVE-2025-69031 WordPress Arcane theme <= 3.6.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in Skywarrior Arcane arcane allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Arcane: from n/a through = 3.6.6...

CVE-2025-69031

CVE-2025-69031 is reported for Arcane (Skywarrior Arcane WordPress theme) with a missing/unauthorized access control vulnerability affecting Arcane versions up to 3.6.6. The issue is described as Missing Authorization due to configured access control levels, implying that authenticated state or p...