15726 matches found
CVE-2025-62028 WordPress Salient theme < 17.4.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in ThemeNectar Salient salient.This issue affects Salient: from n/a through 17.4.0...
CVE-2025-62028 WordPress Salient theme < 17.4.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in ThemeNectar Salient salient.This issue affects Salient: from n/a through 17.4.0...
CVE-2025-62018 WordPress Kallyas theme <= 4.22.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in hogash KALLYAS kallyas.This issue affects KALLYAS: from n/a through = 4.22.0...
CVE-2025-62018 WordPress Kallyas theme <= 4.22.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in hogash KALLYAS kallyas.This issue affects KALLYAS: from n/a through = 4.22.0...
CVE-2025-62018
CVE-2025-62018 describes a Missing Authorization (broken access control) vulnerability in the KALLYAS WordPress theme up to version 4.22.0. Multiple connected sources (Red Hat, EUVD/ENISA, NVD, CVE list entries) corroborate that this is a theme-level issue affecting Kallyas releases through 4.22....
CVE-2025-62017 WordPress Kallyas theme <= 4.22.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in hogash KALLYAS kallyas.This issue affects KALLYAS: from n/a through = 4.22.0...
CVE-2025-62017 WordPress Kallyas theme <= 4.22.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in hogash KALLYAS kallyas.This issue affects KALLYAS: from n/a through = 4.22.0...
CVE-2025-60247 WordPress Bux Woocommerce plugin <= 1.2.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in Bux Bux Woocommerce bux-woocommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bux Woocommerce: from n/a through = 1.2.3...
CVE-2025-60247 WordPress Bux Woocommerce plugin <= 1.2.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in Bux Bux Woocommerce bux-woocommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bux Woocommerce: from n/a through = 1.2.3...
CVE-2025-58986 WordPress Jock On Air Now (JOAN) plugin <= 6.0.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in ganddser Jock On Air Now JOAN joan allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Jock On Air Now JOAN: from n/a through = 6.0.4...
CVE-2025-58986 WordPress Jock On Air Now (JOAN) plugin <= 6.0.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in ganddser Jock On Air Now JOAN joan allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Jock On Air Now JOAN: from n/a through = 6.0.4...
CVE-2025-58986
CVE-2025-58986 concerns WordPress plugin JOAN (Jock On Air Now) with vulnerable versions up to 6.0.4, describing a Missing Authorization issue due to incorrectly configured access control. Red Hat and NVD entries confirm this vulnerability affects JOAN versions
CVE-2025-58243 WordPress imEvent Theme <= 3.4.0 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Jthemes imEvent imevent allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects imEvent: from n/a through = 3.4.0...
CVE-2025-58207 WordPress Ai Image Alt Text Generator for WP Plugin <= 1.1.5 - Broken Access Control Vulnerability
Missing Authorization vulnerability in WP Messiah Ai Image Alt Text Generator for WP ai-image-alt-text-generator-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ai Image Alt Text Generator for WP: from n/a through = 1.1.5...
CVE-2025-58243 WordPress imEvent Theme <= 3.4.0 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Jthemes imEvent imevent allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects imEvent: from n/a through = 3.4.0...
CVE-2025-58207
The CVE-2025-58207 entry concerns the WordPress plugin Ai Image Alt Text Generator for WP, affected versions
CVE-2025-58243
CVE-2025-58243 (imEvent) is a Missing Authorization vulnerability in the WordPress plugin imEvent (Jthemes) affecting versions from n/a up to and including 3.4.0. Public sources (NVD, Red Hat, ENISA ENISA EUVD, CVE list) describe that an unauthenticated user could access functionality not constra...
CVE-2025-5803 WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking.This issue affects VikBooking Hotel Booking Engine & PMS: from n/a through = 1.8.2...
CVE-2025-5803
CVE-2025-5803 : A Missing Authorization vulnerability in the WordPress plugin VikBooking Hotel Booking Engine & PMS (versions n/a through 1.8.2) is documented across multiple sources (NVD/Red Hat/ENISA) as a Broken Access Control issue affecting VikBooking. The CVE entry notes a Medium severity (...