15791 matches found
CVE-2025-58004 WordPress DriCub Theme <= 2.9 - Broken Access Control Vulnerability
Missing Authorization vulnerability in SmartDataSoft DriCub dricub-driving-school allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DriCub: from n/a through = 2.9...
CVE-2025-58003 WordPress Javo Core Plugin <= 3.0.0.266 - Broken Access Control Vulnerability
Missing Authorization vulnerability in javothemes Javo Core allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Javo Core: from n/a through 3.0.0.266...
CVE-2025-58003
CVE-2025-58003 is a Missing Authorization vulnerability in Javo Core affecting the WordPress plugin Javo Core (versions up to and including 3.0.0.266). The vulnerability is documented in CVE-2025-58003 and is listed in Wordfence/WordPress vulnerability feeds with a patch status of Unpatched. The ...
WordPress wpDiscuz Plugin <= 7.6.33 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by Legion Hunter in WordPress Plugin wpDiscuz versions = 7.6.33...
CVE-2025-58009
The CVE-2025-58009 entry concerns CP Multi View Events Calendar for WordPress with a Missing Authorization flaw. Affected versions are listed as up to 1.4.32 (range includes unspecified start). The vulnerability arises from incorrectly configured access control security levels, enabling unauthori...
CVE-2025-58009 WordPress CP Multi View Event Calendar Plugin <= 1.4.32 - Broken Access Control Vulnerability
Missing Authorization vulnerability in codepeople CP Multi View Event Calendar allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects CP Multi View Event Calendar : from n/a through 1.4.32...
CVE-2025-58016 WordPress CF7 Submissions Plugin <= 0.26 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Codexpert, Inc CF7 Submissions cf7-submissions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CF7 Submissions: from n/a through = 0.26...
CVE-2025-58016
CVE-2025-58016 affects CF7 Submissions (WordPress plugin). The vulnerability is Missing Authorization due to misconfigured access control levels, with a CVSS v3.1 base score of 4.3 (Medium) and an observation that exploitation could occur without user interaction. Connected documents confirm the ...
CVE-2025-58029
CVE-2025-58029 is a Missing Authorization vulnerability in the WordPress plugin family Classic Widgets with Block-based Widgets (affected: Classic Widgets with Block-based Widgets, versions
CVE-2025-58221
CVE-2025-58221: PilotPress (Ontraport) WordPress plugin contains a Missing Authorization issue that permits an unauthenticated entity to perform an “arbitrary options update” via the wcmlim_settings_ajax_handler. This aligns with a network-scope vulnerability (CVSS v3.1: 4.3, Medium) and is assoc...
CVE-2025-58221 WordPress PilotPress Plugin <= 2.0.36 - Broken Access Control Vulnerability
Missing Authorization vulnerability in ONTRAPORT PilotPress pilotpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PilotPress: from n/a through = 2.0.36...
CVE-2025-58222 WordPress Team Manager plugin <= 2.5.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Maidul Team Manager wp-team-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team Manager: from n/a through = 2.5.1...
CVE-2025-58222
CVE-2025-58222 describes a Missing Authorization vulnerability in the WordPress Team Manager plugin (Maidul Team Manager), affecting Team Manager versions up to 2.3.14 per the initial description and up to 2.3.16 per Wordfence vulnerability listings. The CVSS 3.1 vector indicates a Medium impact ...
CVE-2025-58251 WordPress Sticky Header Effects for Elementor Plugin <= 2.1.2 - Broken Access Control Vulnerability
Missing Authorization vulnerability in POSIMYTH Sticky Header Effects for Elementor sticky-header-effects-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sticky Header Effects for Elementor: from n/a through = 2.1.2...
CVE-2025-58258
CVE-2025-58258 is a Missing Authorization issue in the WordPress plugin Lazy Blocks (Custom Block Builder). Affected: Lazy Blocks versions 4.1.0 and earlier. Root cause per the document is improper access control that allows unauthorized actions due to configured security levels. The CVE is docum...
CVE-2025-58650 WordPress All In One SEO Pack Plugin <= 4.8.7.1 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Syed Balkhi All In One SEO Pack all-in-one-seo-pack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects All In One SEO Pack: from n/a through = 4.8.7.1...
CVE-2025-58650 WordPress All In One SEO Pack Plugin <= 4.8.7.1 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Syed Balkhi All In One SEO Pack all-in-one-seo-pack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects All In One SEO Pack: from n/a through = 4.8.7.1...
CVE-2025-58660 WordPress Oshine Core Plugin <= 1.5.5 - Broken Access Control Vulnerability
Missing Authorization vulnerability in brandexponents Oshine Core oshine-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Oshine Core: from n/a through = 1.5.5...
CVE-2025-58660 WordPress Oshine Core Plugin <= 1.5.5 - Broken Access Control Vulnerability
Missing Authorization vulnerability in brandexponents Oshine Core oshine-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Oshine Core: from n/a through = 1.5.5...