WordPress WS Form LITE plugin <= 1.10.35 - Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability

Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability discovered by Amin Beheshti in WordPress Plugin WS Form LITE versions = 1.10.35...

WordPress JobSearch WP Job Board plugin <= 2.8.8 - Authentication Bypass via Social Logins vulnerability

Authentication Bypass via Social Logins vulnerability discovered by Foxyyy in WordPress Plugin JobSearch versions = 2.8.8...

CVE-2025-39440

Cross-Site Request Forgery CSRF vulnerability in Rajesh Broken Links Remover broken-links-remover allows Stored XSS.This issue affects Broken Links Remover: from n/a through = 1.2.2...

CVE-2025-46535 WordPress Custom Login and Registration plugin <= 1.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in AlphaEfficiencyTeam Custom Login and Registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Login and Registration: from n/a through 1.0.0...

WordPress Custom Login and Registration plugin <= 1.0.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nguyen Ngoc Quang Bach maysbachs in WordPress Plugin Custom Login and Registration versions = 1.0.0...

CVE-2025-32982

NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module...

CVE-2025-32982

NETSCOUT nGeniusONE prior to 6.4.0 b2350 is affected by a Broken Authorization Schema in the report module (CVE-2025-32982). The CVE details indicate a high-severity impact (CVSS 3.1: 7.5; Confidentiality impact H, Integrity/Availability none) due to an authorization flaw that could enable unauth...

CVE-2025-32982

NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module...

WordPress BM Content Builder plugin <= 3.16.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Options Update vulnerability discovered by Tonn in WordPress Plugin BM Content Builder versions = 3.16.2.1...

WordPress Media Library Downloader plugin <= 1.3.1 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by ch4r0n in WordPress Plugin Media Library Downloader versions = 1.3.1...

WordPress Bulk Assign Linked Products For WooCommerce plugin <= 2.1 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by ch4r0n in WordPress Plugin Bulk Assign Linked Products For WooCommerce versions = 2.1...

WordPress WP Customize Login Page plugin <= 1.6.5 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Nabil Irawan in WordPress Plugin WP Customize Login Page versions = 1.6.5...

WordPress Smart Hashtags [#hashtagger] plugin <= 7.2.3 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by domiee13 in WordPress Plugin Smart Hashtags hashtagger versions = 7.2.3...

WordPress Animate plugin <= 0.5 - Server Side Request Forgery (SSRF) Vulnerability

Server Side Request Forgery SSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Animate versions = 0.5...

CVE-2025-46519 WordPress Media Library Downloader plugin <= 1.3.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in M.Code Media Library Downloader media-library-downloader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Media Library Downloader: from n/a through = 1.3.1...

CVE-2025-46519 WordPress Media Library Downloader plugin <= 1.3.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in M.Code Media Library Downloader media-library-downloader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Media Library Downloader: from n/a through = 1.3.1...

CVE-2025-46485 WordPress WP Customize Login Page <= 1.6.5 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Carlo La Pera WP Customize Login Page allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WP Customize Login Page: from n/a through 1.6.5...

CVE-2025-46470 WordPress Smart Hashtags [#hashtagger] <= 7.2.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Peter Raschendorfer Smart Hashtags hashtagger allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Smart Hashtags hashtagger: from n/a through 7.2.3...

CVE-2025-46470 WordPress Smart Hashtags [#hashtagger] plugin <= 7.2.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Peter Raschendorfer Smart Hashtags hashtagger hashtagger allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Hashtags hashtagger: from n/a through = 7.2.3...

CVE-2025-39385 WordPress Sirat theme <= 1.5.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in vowelweb Sirat sirat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sirat: from n/a through = 1.5.1...