CVE-2025-49913 WordPress CoSchedule plugin <= 3.4.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in CoSchedule CoSchedule coschedule-by-todaymade allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CoSchedule: from n/a through = 3.4.0...

CVE-2025-49907

CVE-2025-49907 affects the MDTF (Meta Data and Taxonomies Filter) WordPress plugin RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter, specifically versions &lt;= 1.3.3.9. The issue is a Missing Authorization / Broken Access Control vulnerability allowing improper access control, as describe...

CVE-2025-49907 WordPress MDTF plugin <= 1.3.3.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MDTF: from n/a through = 1.3.3.9...

CVE-2025-49903

CVE-2025-49903 is a real WordPress vulnerability in the bdthemes ZoloBlocks plugin. Wordfence and Patchstack indicate a Missing Authorization /broken access control issue in ZoloBlocks versions up to 2.3.11, potentially enabling unauthorized access due to incorrectly configured access control sec...

CVE-2025-49903 WordPress ZoloBlocks plugin <= 2.3.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in bdthemes ZoloBlocks zoloblocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ZoloBlocks: from n/a through = 2.3.11...

CVE-2025-49907 WordPress MDTF plugin <= 1.3.3.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MDTF: from n/a through = 1.3.3.9...

CVE-2025-49906

CVE-2025-49906 affects StellarWP WPComplete (wpcomplete) up to version 2.9.5.3. The vulnerability is due to Missing Authorization, allowing access to functionality not constrained by ACLs. Exploitation details are not provided in the documents, but multiple sources confirm the issue and recommend...

CVE-2025-49906 WordPress WPComplete plugin <= 2.9.5.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in StellarWP WPComplete wpcomplete allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPComplete: from n/a through = 2.9.5.3...

CVE-2025-49906 WordPress WPComplete plugin <= 2.9.5.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in StellarWP WPComplete wpcomplete allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPComplete: from n/a through = 2.9.5.3...

CVE-2025-49377

CVE-2025-49377 affects the WordPress Hydra Booking plugin up to version 1.1.9. The root cause is missing authorization due to incorrectly configured access control security levels (broken access control). This can permit unauthorized access as described across multiple sources (e.g., Red Hat advi...

CVE-2025-49899 WordPress Whydonate plugin <= 4.0.15 - Broken Access Control vulnerability

Missing Authorization vulnerability in jjlemstra Whydonate wp-whydonate allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Whydonate: from n/a through = 4.0.15...

CVE-2025-49899 WordPress Whydonate plugin <= 4.0.15 - Broken Access Control vulnerability

Missing Authorization vulnerability in jjlemstra Whydonate wp-whydonate allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Whydonate: from n/a through = 4.0.15...

CVE-2025-49899

CVE-2025-49899 is a Missing Authorization vulnerability in the WordPress plugin Whydonate (wp-whydonate), affecting versions from n/a through 4.0.15. The issue allows access to functionality not properly constrained by ACLs. Public sources in the provided documents identify the vulnerability with...

CVE-2025-49377 WordPress Hydra Booking plugin <= 1.1.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Themefic Hydra Booking hydra-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hydra Booking: from n/a through = 1.1.9...

CVE-2025-49377 WordPress Hydra Booking plugin <= 1.1.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Themefic Hydra Booking hydra-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hydra Booking: from n/a through = 1.1.9...

CVE-2025-49376

The CVE-2025-49376 entry concerns the WordPress DELUCKS SEO plugin (versions up to and including 2.5.9). The underlying issue is a Missing Authorization vulnerability: a Broken Access Control flaw that allows access to functionality not properly constrained by ACLs. Affected component is the DELU...

CVE-2025-49376 WordPress DELUCKS SEO plugin <= 2.5.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in DELUCKS DELUCKS SEO delucks-seo allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects DELUCKS SEO: from n/a through = 2.5.9...

CVE-2025-49376 WordPress DELUCKS SEO plugin <= 2.5.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in DELUCKS DELUCKS SEO delucks-seo allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects DELUCKS SEO: from n/a through = 2.5.9...

CVE-2025-48096 WordPress Custom CSS plugin <= 1.4.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in FRESHFACE Custom CSS custom-css-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom CSS: from n/a through = 1.4.0...

CVE-2025-48096 WordPress Custom CSS plugin <= 1.4.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in FRESHFACE Custom CSS custom-css-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom CSS: from n/a through = 1.4.0...