CVE-2025-60130

CVE-2025-60130 : Missing Authorization in WEDOS Global (CDN Cache & Security) affects WEDOS Global

CVE-2025-60129

CVE-2025-60129: Missing Authorization in the Yext WordPress plugin (affected versions: n/a–1.1.3) allows accessing functionality not properly constrained by ACLs. The entry lists a basic impact (low) with no documented exploit details in the provided data, and no connected documents specify root ...

CVE-2025-60129 WordPress Yext Plugin <= 1.1.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Yext Yext yext allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Yext: from n/a through = 1.1.3...

CVE-2025-60130 WordPress WEDOS Global Plugin <= 1.2.2 - Broken Access Control Vulnerability

Missing Authorization vulnerability in wedos.com WEDOS Global wgpwpp allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WEDOS Global: from n/a through = 1.2.2...

CVE-2025-60128 WordPress Delisho Plugin <= 1.1.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in WP Delicious Delisho dr-widgets-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Delisho: from n/a through = 1.1.3...

CVE-2025-60127

CopySafe Web Protection (Copy Protect Images) is listed as vulnerable under CVE-2025-60127 due to a Missing Authorization issue. The problem arises from incorrectly configured access control security levels, enabling unauthorized actions within the affected product. The vulnerability is associate...

CVE-2025-60127 WordPress CopySafe Web Protection plugin <= 5.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in ArtistScope CopySafe Web Protection wp-copysafe-web allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CopySafe Web Protection: from n/a through = 5.1...

CVE-2025-60123

HivePress Claim Listings (WordPress plugin) is affected by CVE-2025-60123. The vulnerability is described as a Missing Authorization issue stemming from incorrectly configured access control levels in HivePress Claim Listings

CVE-2025-60123 WordPress HivePress Claim Listings plugin <= 1.1.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in HivePress HivePress Claim Listings hivepress-claim-listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HivePress Claim Listings: from n/a through = 1.1.3...

CVE-2025-60123 WordPress HivePress Claim Listings plugin <= 1.1.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in HivePress HivePress Claim Listings hivepress-claim-listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HivePress Claim Listings: from n/a through = 1.1.3...

CVE-2025-60122

HivePress Claim Listings (WordPress plugin) contains a Missing Authorization vulnerability (CVE-2025-60122) affecting versions up to 1.1.3. The issue arises from incorrectly configured access controls, enabling unauthorized users to access or modify settings as described in the CVE entry. CVSS v3...

CVE-2025-60122 WordPress HivePress Claim Listings plugin <= 1.1.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in HivePress HivePress Claim Listings hivepress-claim-listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HivePress Claim Listings: from n/a through = 1.1.4...

CVE-2025-60121 WordPress WooEvents plugin <= 4.1.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ex-Themes WooEvents woo-events allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooEvents: from n/a through = 4.1.7...

CVE-2025-60121 WordPress WooEvents plugin <= 4.1.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ex-Themes WooEvents woo-events allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooEvents: from n/a through = 4.1.7...

CVE-2025-60121

CVE-2025-60121 refers to a Missing Authorization vulnerability in WooEvents (WooCommerce WordPress plugin) affecting versions up to 4.1.7. The Wordfence entry notes the issue with a CVSS v3.1 base score of 5.3 (Medium) and no patch is indicated as available in the provided documents. Exploitation...

CVE-2025-60120 WordPress WP Directory Kit plugin <= 1.4.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPDirectoryKit WP Directory Kit wpdirectorykit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Directory Kit: from n/a through = 1.4.0...

CVE-2025-60120

CVE-2025-60120 : WP Directory Kit plugin for WordPress had a Missing Authorization vulnerability affecting versions up to 1.4.0, enabling exploitation of access-control misconfigurations. The Wordfence entry confirms patch in 1.4.0. Remediation: upgrade to a version &gt;= 1.4.0 (or apply vendor p...

CVE-2025-60116

CVE-2025-60116: Missing Authorization in Grand Conference Theme Custom Post Type (WordPress). Affected software: Grand Conference Theme Custom Post Type up to version 2.6.3. Root cause: incorrectly configured access control/security levels enabling unauthorized actions on the custom post type. Ex...

CVE-2025-60103

CVE-2025-60103: ListingPro Plugin

CVE-2025-60103 WordPress ListingPro plugin <= 2.9.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in CridioStudio ListingPro listingpro-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro: from n/a through = 2.9.8...