WordPress Wordpress Auto Spinner plugin <= 3.25.0 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Anhchangmutrang in WordPress Plugin Wordpress Auto Spinner versions = 3.25.0...

WordPress CSS3 Compare Pricing Tables for WordPress plugin <= 11.6 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Tran Nguyen Bao KhanhVCI - VNPT in WordPress Plugin CSS3 Compare Pricing Tables for WordPress versions = 11.6...

WordPress MapSVG plugin < 8.6.13 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Anhchangmutrang Patchstack Alliance in WordPress Plugin MapSVG versions 8.6.13...

WordPress CURCY plugin <= 2.3.7 - Arbitrary Shortcode Execution vulnerability

Arbitrary Shortcode Execution vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin CURCY versions = 2.3.7...

WordPress EventON plugin <= 4.9.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nguyễn Trung Kiên anhchangmutrang in WordPress Plugin EventON versions = 4.9.8...

WordPress BERTHA AI plugin <= 1.13 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by astra.r3verii in WordPress Plugin BERTHA AI versions = 1.13...

WordPress Sharespine Woocommerce Connector plugin <= 4.7.55 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by ch4r0n in WordPress Plugin Sharespine Woocommerce Connector versions = 4.7.55...

WordPress Push notification for Mobile and Web app plugin <= 2.0.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by ch4r0n in WordPress Plugin Push notification for Mobile and Web app versions = 2.0.3...

WordPress WooCommerce POS plugin <= 1.7.8 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Marek Mikita in WordPress Plugin WooCommerce POS versions = 1.7.8...

WordPress EventON plugin <= 2.4.4 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by astra.r3verii in WordPress Plugin EventON versions = 2.4.4...

WordPress ProfileGrid plugin <= 5.9.5.1 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin ProfileGrid versions = 5.9.5.1...

WordPress 6Storage Rentals plugin <= 2.20.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Martino Spagnuolo r3verii in WordPress Plugin 6Storage Rentals versions = 2.20.1...

WordPress Acerola Theme <= 1.6.5 is vulnerable to Broken Access Control

Software Acerola Type Theme Vulnerable versions = 1.6.5 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2025-31066 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 095f29f718c8 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber...

WordPress HotStar – Multi-Purpose Business Theme Theme <= 1.4 is vulnerable to Broken Access Control

Software HotStar – Multi-Purpose Business Theme Type Theme Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A5: Security Misconfiguration Classification Broken Access Control CVE CVE-2025-31071 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID bb3eaed13631 Credits Tran...

WordPress Rozario Theme <= 1.4 is vulnerable to Broken Access Control

Software Rozario Type Theme Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2025-31065 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 039f36178658 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber...

WordPress The Business Theme <= 1.6.1 is vulnerable to Broken Access Control

Software The Business Type Theme Vulnerable versions = 1.6.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2025-31630 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID f1f03f03f89d Credits Tran Nguyen Bao Khanh VCI - VNPT...

WordPress AnyWhere Elementor Pro Theme <= 2.29 is vulnerable to Broken Access Control

Software AnyWhere Elementor Pro Type Theme Vulnerable versions = 2.29 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2025-31046 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 628f90def353 Credits Anhchangmutrang Required...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization due to the improper verification of user permissions when accessing groups. An attacker can view unauthorized group information by crafting a malicious API request. Remediation Upgrade...

CVE-2024-51666 WordPress Tours plugin <= 1.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Tosin Oguntuyi Tours tours.This issue affects Tours: from n/a through = 1.0.0...

CVE-2024-51666 WordPress Tours plugin <= 1.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Tosin Oguntuyi Tours tours.This issue affects Tours: from n/a through = 1.0.0...