CVE-2025-58783 WordPress Gutentor plugin <= 3.5.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in gutentor Gutentor gutentor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutentor: from n/a through = 3.5.5...

CVE-2025-58783

Gutentor (WordPress) contains a Missing Authorization/Broken Access Control vulnerability affecting versions through 3.5.1. Root cause is incorrect access control configuration enabling unauthorized actions. Impact: potential access/control bypass. Remediation: upgrade to a fixed release (Patchst...

WordPress Simple Price Calculator Plugin <= 1.3 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Mika in WordPress Plugin Simple Price Calculator versions = 1.3...

WordPress Site Info Plugin <= 1.1 - Sensitive Data Exposure Vulnerability

Sensitive Data Exposure Vulnerability discovered by Bao BlueRock in WordPress Plugin Site Info versions = 1.1...

WordPress Quick Event Calendar Plugin <= 1.4.9 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Quick Event Calendar versions = 1.4.9...

WordPress Media Author Plugin <= 1.0.4 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Bao BlueRock in WordPress Plugin Media Author versions = 1.0.4...

WordPress Shk Corporate Theme <= 2.4.1.1 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Martino Spagnuolo r3verii in WordPress Theme Shk Corporate versions = 2.4.1.1...

WordPress SoftMe Theme <= 1.1.27 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Martino Spagnuolo r3verii in WordPress Theme SoftMe versions = 1.1.27...

WordPress Product Carousel Slider for Elementor Plugin <= 2.1.3 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Peter Thaleikis in WordPress Plugin Product Carousel Slider for Elementor versions = 2.1.3...

WordPress Consultstreet Theme <= 3.0.0 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Anhchangmutrang in WordPress Theme Consultstreet versions = 3.0.0...

WordPress Ray Enterprise Translation plugin <= 1.7.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by LVT-tholv2k in WordPress Plugin Ray Enterprise Translation versions = 1.7.2...

WordPress Gutentor plugin <= 3.5.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Denver Jackson in WordPress Plugin Gutentor versions = 3.5.5...

WordPress SoftMe Theme <= 1.1.24 is vulnerable to Broken Access Control

Software SoftMe Type Theme Vulnerable versions = 1.1.24 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2025-58817 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 73da99fa2c92 Credits Martino Spagnuolo r3verii Required...

WordPress Consultstreet Theme <= 3.0.0 is vulnerable to Broken Access Control

Software Consultstreet Type Theme Vulnerable versions = 3.0.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2025-58813 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID ac7244360900 Credits Anhchangmutrang Required privilege...

WordPress Shk Corporate Theme <= 2.4.1.1 is vulnerable to Broken Access Control

Software Shk Corporate Type Theme Vulnerable versions = 2.4.1.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2025-58824 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 45c7c66747ba Credits Martino Spagnuolo r3verii Requir...

WordPress Quick Paypal Payments Plugin <= 5.7.46 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Quick Paypal Payments versions = 5.7.46...

DNSSEC validation may accept broken authentication chains

...

ax25: Remove broken autobind

...

WordPress Ai Engine plugin <= 2.9.5 - Missing Authorization to Unauthenticated Uploaded Files Disclosure And Deletion vulnerability

Missing Authorization to Unauthenticated Uploaded Files Disclosure And Deletion vulnerability discovered by ISMAILSHADOW in WordPress Plugin AI Engine versions = 2.9.5...

WordPress Contact Form By Mega Forms Plugin <= 1.6.1 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Le Cong Danh vodanh in WordPress Plugin Contact Form By Mega Forms versions = 1.6.1...