CVE-2025-66117

CVE-2025-66117 corresponds to a Missing Authorization/Broken Access Control issue in the WordPress plugin Easy Form . Affected: Easy Form versions up to and including 2.7.8 . The vulnerability arises from incorrectly configured access control, enabling exploitation due to missing authorization. M...

CVE-2025-66117 WordPress Easy Form plugin <= 2.7.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ays Pro Easy Form easy-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Form: from n/a through = 2.7.8...

CVE-2025-66100 WordPress RestroPress plugin <= 3.2.3.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Magnigenie RestroPress restropress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RestroPress: from n/a through = 3.2.3.5...

CVE-2025-66100 WordPress RestroPress plugin <= 3.2.3.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Magnigenie RestroPress restropress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RestroPress: from n/a through = 3.2.3.5...

CVE-2025-66104 WordPress Offload, AI & Optimize with Cloudflare Images plugin <= 1.9.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Anton Vanyukov Offload, AI & Optimize with Cloudflare Images cf-images allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Offload, AI & Optimize with Cloudflare Images: from n/a through = 1.9.5...

CVE-2025-66088 WordPress PropertyHive plugin <= 2.1.12 - Broken Access Control vulnerability

Missing Authorization vulnerability in Property Hive PropertyHive propertyhive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PropertyHive: from n/a through = 2.1.12...

CVE-2025-66104 WordPress Offload, AI & Optimize with Cloudflare Images plugin <= 1.9.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Anton Vanyukov Offload, AI & Optimize with Cloudflare Images cf-images allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Offload, AI & Optimize with Cloudflare Images: from n/a through = 1.9.5...

CVE-2025-66100

CVE-2025-66100 affects WordPress RestroPress plugin up to version 3.2.3.5, with a Missing Authorization/Broken Access Control condition enabling improper access due to incorrectly configured security levels. Patch/state indicates remediation in newer versions (3.2.3.5 or later); CVSSv3.1 base sco...

CVE-2025-66088

CVE-2025-66088 is a Missing Authorization/Broken Access Control vulnerability in the WordPress plugin Property Hive (PropertyHive) versions up to and including 2.1.12. Multiple sources (NVD, Red Hat, CIRCL, CVE lists, and vulnerability enrichments) confirm that an incorrectly configured access co...

CVE-2025-66104

CVE-2025-66104 describes a Missing Authorization (Broken Access Control) vulnerability in the WordPress Offload, AI & Optimize with Cloudflare Images cf-images plugin (versions n/a through 1.9.5). The CVSS base metrics indicate attack vector NETWORK, low attack complexity, privileges required LOW...

CVE-2025-66054

CVE-2025-66054 describes a missing authorization vulnerability in the WordPress LearnPress plugin (LearnPress

CVE-2025-66054 WordPress LearnPress plugin <= 4.2.9.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through = 4.2.9.4...

CVE-2025-66068 WordPress InstaWP Connect plugin <= 0.1.1.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in InstaWP InstaWP Connect instawp-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects InstaWP Connect: from n/a through = 0.1.1.9...

CVE-2025-66070 WordPress wpForo Forum plugin <= 2.4.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in Tomdever wpForo Forum wpforo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpForo Forum: from n/a through = 2.4.10...

CVE-2025-66070

CVE-2025-66070 is a real vulnerability affecting the WordPress plugin wpForo Forum (versions &lt;= 2.4.10). The issue is described as a Missing Authorization / Broken Access Control vulnerability that allows exploitation through improperly configured access control levels. The CVSSv3.1 base score...

CVE-2025-66068

The CVE-2025-66068 entry concerns a Missing Authorization (broken access control) vulnerability in the WordPress plugin InstaWP Connect, affecting versions up to and including 0.1.1.9. Connected sources indicate this is a real vulnerability with patched status, impacting InstaWP Connect’s access ...

CVE-2025-66070 WordPress wpForo Forum plugin <= 2.4.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in Tomdever wpForo Forum wpforo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpForo Forum: from n/a through = 2.4.10...

CVE-2025-66068 WordPress InstaWP Connect plugin <= 0.1.1.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in InstaWP InstaWP Connect instawp-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects InstaWP Connect: from n/a through = 0.1.1.9...

CVE-2025-64375 WordPress WP Social Ninja plugin <= 3.20.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mahmudul Hasan Arif WP Social Ninja wp-social-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Social Ninja: from n/a through = 3.20.1...

CVE-2025-64378

CVE-2025-64378 describes a Missing Authorization vulnerability in the WordPress ListingPro theme (ListingPro) prior to version 2.9.10. The root cause is misconfigured access control security levels that allow exploitation without user interaction, leading to potential elevation of privileges or u...