CVE-2025-62022 WordPress BuddyPress plugin <= 14.3.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in BuddyPress BuddyPress buddypress.This issue affects BuddyPress: from n/a through = 14.3.4...

CVE-2025-62021 WordPress Acknowledgify plugin <= 1.1.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Made Neat Acknowledgify acknowledgify.This issue affects Acknowledgify: from n/a through = 1.1.3...

CVE-2025-62021 WordPress Acknowledgify plugin <= 1.1.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Made Neat Acknowledgify acknowledgify.This issue affects Acknowledgify: from n/a through = 1.1.3...

CVE-2025-62013 WordPress UiChemy plugin <= 4.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in POSIMYTH UiChemy uichemy.This issue affects UiChemy: from n/a through = 4.0.0...

CVE-2025-62013 WordPress UiChemy plugin <= 4.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in POSIMYTH UiChemy uichemy.This issue affects UiChemy: from n/a through = 4.0.0...

CVE-2025-62013

CVE-2025-62013 refers to a Missing Authorization (broken access control) vulnerability in the UiChemy WordPress plugin (UiChemy — Figma Converter for Elementor, Gutenberg and Bricks) up to version 4.0.0. The advisory scope indicates affected software is UiChemy: from n/a through

CVE-2025-62006 WordPress WP SMS plugin <= 7.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in VeronaLabs WP SMS wp-sms.This issue affects WP SMS: from n/a through = 7.0.1...

CVE-2025-62006

CVE-2025-62006 refers to a Missing Authorization vulnerability in the WordPress WP SMS plugin (VeronaLabs WP SMS wp-sms) affecting versions up to 7.0.1. The connected documents identify this as a Broken Access Control issue that could enable an attack with network access, low privileges required,...

CVE-2025-62006 WordPress WP SMS plugin <= 7.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in VeronaLabs WP SMS wp-sms.This issue affects WP SMS: from n/a through = 7.0.1...

CVE-2025-53424

The CVE-2025-53424 entry describes a Missing Authorization vulnerability in the vanquish WordPress plugin WooCommerce Orders & Customers Exporter (woocommerce-orders-ei) that allows exploitation of incorrectly configured access control. Affected product: WooCommerce Orders & Customers Exporter ve...

CVE-2025-53424 WordPress WooCommerce Orders & Customers Exporter plugin <= 5.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in vanquish WooCommerce Orders & Customers Exporter woocommerce-orders-ei allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Orders & Customers Exporter: from n/a through = 5.4...

CVE-2025-53424 WordPress WooCommerce Orders & Customers Exporter plugin <= 5.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in vanquish WooCommerce Orders & Customers Exporter woocommerce-orders-ei allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Orders & Customers Exporter: from n/a through = 5.4...

CVE-2025-53421 WordPress Accordion plugin <= 2.3.14 - Broken Access Control vulnerability

Missing Authorization vulnerability in PickPlugins Accordion accordions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accordion: from n/a through = 2.3.14...

CVE-2025-53421

CVE-2025-53421 concerns a Missing Authorization vulnerability in the WordPress plugin Accordion (PickPlugins Accordion) affecting versions through 2.3.14. The flaw allows exploitation of misconfigured access control security levels without user interaction, with a CVSS v3.1 base score of 6.3 (Net...

CVE-2025-53236 WordPress UDesign Core plugin <= 4.14.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in AndonDesign UDesign Core u-design-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UDesign Core: from n/a through = 4.14.0...

CVE-2025-52738 WordPress Wikipedia Preview plugin <= 1.15.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Wikimedia Foundation Wikipedia Preview wikipedia-preview allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wikipedia Preview: from n/a through = 1.15.0...

CVE-2025-52738

The CVE-2025-52738 entry covers a Missing Authorization vulnerability in the Wikimedia Foundation Wikipedia Preview WordPress plugin. Affected product: WordPress Wikipedia Preview plugin up to version 1.15.0. Root cause: incorrectly configured access control security levels leading to Broken Acce...

CVE-2025-49961 WordPress Breeze Checkout plugin <= 1.4.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Breeze Team Breeze Checkout breeze-checkout allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breeze Checkout: from n/a through = 1.4.0...

CVE-2025-49961

The CVE-2025-49961 entry refers to a Missing Authorization vulnerability in the WordPress Breeze Checkout plugin (breeze-checkout) affecting versions up to 1.4.0. The root cause is a lack of proper access control configuration, allowing exploitation of broken access control security levels. Multi...

CVE-2025-49949 WordPress Templazee plugin <= 1.0.2 - Broken Access Control Vulnerability

Missing Authorization vulnerability in templazee Templazee templazee allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Templazee: from n/a through = 1.0.2...