CVE-2025-60120 WordPress WP Directory Kit plugin <= 1.4.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPDirectoryKit WP Directory Kit wpdirectorykit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Directory Kit: from n/a through = 1.4.0...

CVE-2025-60120

CVE-2025-60120 : WP Directory Kit plugin for WordPress had a Missing Authorization vulnerability affecting versions up to 1.4.0, enabling exploitation of access-control misconfigurations. The Wordfence entry confirms patch in 1.4.0. Remediation: upgrade to a version &gt;= 1.4.0 (or apply vendor p...

CVE-2025-60116

CVE-2025-60116: Missing Authorization in Grand Conference Theme Custom Post Type (WordPress). Affected software: Grand Conference Theme Custom Post Type up to version 2.6.3. Root cause: incorrectly configured access control/security levels enabling unauthorized actions on the custom post type. Ex...

CVE-2025-60103

CVE-2025-60103: ListingPro Plugin

CVE-2025-60103 WordPress ListingPro plugin <= 2.9.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in CridioStudio ListingPro listingpro-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro: from n/a through = 2.9.8...

CVE-2025-60098 WordPress Theme My Login Plugin <= 7.1.12 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Jeff Farthing Theme My Login theme-my-login allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Theme My Login: from n/a through = 7.1.12...

CVE-2025-60098 WordPress Theme My Login Plugin <= 7.1.12 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Jeff Farthing Theme My Login theme-my-login allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Theme My Login: from n/a through = 7.1.12...

CVE-2025-60098

CVE-2025-60098 is a confirmed Missing Authorization vulnerability in the WordPress plugin Theme My Login , affecting versions up to 7.1.12. CVSS v3.1 base score 6.5 (Medium) with NETWORK attack vector, LOW complexity, no privileges required, and LOW impact on availability; impact primarily to con...

CVE-2025-60097 WordPress TheGem Theme <= 5.10.5 - Broken Access Control Vulnerability

Missing Authorization vulnerability in CodexThemes TheGem thegem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TheGem: from n/a through = 5.10.5...

CVE-2025-60097

Technical details about CVE-2025-60097 are not provided in the connected documents. Public disclosures, affected versions, impact, and fixes are not present here; monitor for updates from official advisories.

CVE-2025-60096 WordPress TheGem (Elementor) Theme <= 5.10.5 - Broken Access Control Vulnerability

Missing Authorization vulnerability in CodexThemes TheGem Elementor thegem-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TheGem Elementor: from n/a through = 5.10.5...

CVE-2025-60096 WordPress TheGem (Elementor) Theme <= 5.10.5 - Broken Access Control Vulnerability

Missing Authorization vulnerability in CodexThemes TheGem Elementor thegem-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TheGem Elementor: from n/a through = 5.10.5...

CVE-2025-60094 WordPress Stackable Plugin <= 3.18.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Benjamin Intal Stackable stackable-ultimate-gutenberg-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stackable: from n/a through = 3.18.1...

CVE-2025-60094 WordPress Stackable Plugin <= 3.18.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Benjamin Intal Stackable stackable-ultimate-gutenberg-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stackable: from n/a through = 3.18.1...

CVE-2025-60094

Description indicates a Missing Authorization vulnerability in Stackable (Benjamin Intal). The Connected documents do not provide technical details (affected versions, root cause, exploit, or fixes). No exploit data or remediation is present here; monitor for updates.

CVE-2025-48326 WordPress Acclectic Media Organizer Plugin <= 1.4 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Acclectic Media Acclectic Media Organizer acclectic-media-organizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Acclectic Media Organizer: from n/a through = 1.4...

CVE-2025-48326

The CVE-2025-48326 entry covers a Missing Authorization vulnerability in the WordPress Acclectic Media Organizer plugin (versions up to 1.4) caused by broken access control. Affects the plugin’s access control configuration, enabling unauthorized access with no user interaction required; the CVSS...

CVE-2025-48326 WordPress Acclectic Media Organizer Plugin <= 1.4 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Acclectic Media Acclectic Media Organizer acclectic-media-organizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Acclectic Media Organizer: from n/a through = 1.4...

CVE-2025-58919

CVE-2025-58919 is a Missing Authorization vulnerability affecting WordPress Wide Banner plugin versions up to 1.0.4. The issue arises from improperly configured access control, resulting in insufficient authorization checks (Broken Access Control). Public sources in the dataset identify Wide Bann...

CVE-2025-58919 WordPress Wide Banner plugin <= 1.0.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in guihom Wide Banner wide-banner allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wide Banner: from n/a through = 1.0.4...