15692 matches found
CVE-2025-66134
CVE-2025-66134 concerns the WordPress plugin NinjaTeam FileBird Pro (FileBird Pro) with versions up to and including 6.4.9. The connected sources describe a missing/incorrectly configured authorization mechanism (broken access control) that permits exploitation through misconfigured access contro...
CVE-2025-66162 WordPress Spoter for Elementor plugin <= 1.04 - Broken Access Control vulnerability
Missing Authorization vulnerability in merkulove Spoter for Elementor spoter-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spoter for Elementor: from n/a through = 1.04...
CVE-2025-66163 WordPress Masker for Elementor plugin <= 1.1.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in merkulove Masker for Elementor masker-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Masker for Elementor: from n/a through = 1.1.4...
CVE-2025-66163
CVE-2025-66163 represents a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin Masker for Elementor (masker-elementor) affecting versions up to 1.1.4. Public sources describe an improperly configured access control as the root cause, enabling unauthorized access e...
CVE-2025-66163 WordPress Masker for Elementor plugin <= 1.1.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in merkulove Masker for Elementor masker-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Masker for Elementor: from n/a through = 1.1.4...
CVE-2025-66161 WordPress Grider for Elementor plugin <= 1.0.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in merkulove Grider for Elementor grider-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grider for Elementor: from n/a through = 1.0.8...
CVE-2025-66147 WordPress Coder for Elementor plugin <= 1.0.13 - Broken Access Control vulnerability
Missing Authorization vulnerability in merkulove Coder for Elementor coder-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Coder for Elementor: from n/a through = 1.0.13...
CVE-2025-66147
CVE-2025-66147 is a missing authorization/broken access control vulnerability reported for the WordPress plugin Coder for Elementor (Coder for Elementor:
CVE-2025-66162
CVE-2025-66162 describes a Missing Authorization vulnerability in the WordPress plugin Spoter for Elementor (Spoter-elementor). Affected: Spoter for Elementor versions up to 1.04. Root cause: incorrectly configured access control security levels that can be exploited to bypass authorization. Expl...
CVE-2025-66130 WordPress WP Views Counter plugin <= 2.1.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in etruel WP Views Counter wpecounter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Views Counter: from n/a through = 2.1.2...
CVE-2025-66131
Technical details for CVE-2025-66131 (Yaad Sarig Payment Gateway for WC) are not provided in the connected documents. Public information about affected versions, root cause, impact, or fix is not available here; monitor for updates.
CVE-2025-66131 WordPress Yaad Sarig Payment Gateway For WC plugin <= 2.2.11 - Broken Access Control vulnerability
Missing Authorization vulnerability in yaadsarig Yaad Sarig Payment Gateway For WC yaad-sarig-payment-gateway-for-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Yaad Sarig Payment Gateway For WC: from n/a through = 2.2.11...
CVE-2025-66133 WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.0.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent gdpr-cookie-consent allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cookie Notice for GDPR, CCPA & ePrivacy Consent: from n/a through = 4.0.7...
CVE-2025-66130
CVE-2025-66130 corresponds to a missing/incorrect authorization vulnerability in the WordPress plugin WP Views Counter (wpecounter) prior to or equal to version 2.1.2. The issue is described as broken access control (missing authorization) that could allow an attacker with no privileges to perfor...
CVE-2025-66127 WordPress Essential Real Estate plugin <= 5.3.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in g5theme Essential Real Estate essential-real-estate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Real Estate: from n/a through = 5.3.2...
CVE-2025-66129 WordPress Pochipp plugin <= 1.18.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in wppochipp Pochipp pochipp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pochipp: from n/a through = 1.18.0...
CVE-2025-66129
CVE-2025-66129 refers to a WordPress plugin issue in the Pochipp plugin (<= 1.18.0) described as a Missing Authorization / Broken Access Control vulnerability. The underlying problem is an improperly configured access control security level that could enable unauthorized actions. Public source...
CVE-2025-66127
CVE-2025-66127 concerns a Missing Authorization (broken access control) vulnerability in the WordPress plugin Essential Real Estate (g5theme Essential Real Estate) affecting versions up to 5.2.2. Affected software is the Essential Real Estate WordPress plugin; root cause is incorrectly configured...
CVE-2025-66128 WordPress Sendinblue for WooCommerce plugin <= 4.0.49 - Broken Access Control vulnerability
Missing Authorization vulnerability in Brevo Sendinblue for WooCommerce woocommerce-sendinblue-newsletter-subscription allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sendinblue for WooCommerce: from n/a through = 4.0.49...
CVE-2025-66129 WordPress Pochipp plugin <= 1.18.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in wppochipp Pochipp pochipp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pochipp: from n/a through = 1.18.0...