CVE-2025-31042 WordPress Sandwich Adsense plugin <= 4.0.2 - Broken Access Control Vulnerability

Missing Authorization vulnerability in rtakao Sandwich Adsense firsth3tagadsense allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sandwich Adsense: from n/a through = 4.0.2...

CVE-2025-31377

CVE-2025-31377 : Missing Authorization in the WordPress plugin Woo Product Feed For Marketing Channels (versions up to 1.9.0) allows exploitation of access control weakness (vector not detailed in provided data). CVSS 3.1: Network attack, Low complexity, No privileges required, UI not required, A...

CVE-2025-31377 WordPress Woo Product Feed For Marketing Channels plugin <= 1.9.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Asaquzzaman mishu Woo Product Feed For Marketing Channels woocommerce-to-google-merchant-center allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Woo Product Feed For Marketing Channels: from n/a through = 1.9.0...

WordPress Logo Showcase Ultimate plugin <= 1.4.4 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Logo Showcase Ultimate versions = 1.4.4...

CVE-2025-32684 WordPress MapSVG Lite plugin <= 8.6.4 - Broken Access Control Vulnerability

Missing Authorization vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MapSVG: from n/a through = 8.6.4...

CVE-2025-32684 WordPress MapSVG Lite plugin <= 8.5.32 - Broken Access Control Vulnerability

Missing Authorization vulnerability in RomanCode MapSVG Lite allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MapSVG Lite: from n/a through 8.5.32...

WordPress Mergado Pack plugin <= 4.2.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Mergado Pack versions = 4.2.1...

WordPress MapSVG Lite plugin <= 8.6.4 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Anhchangmutrang in WordPress Plugin MapSVG versions = 8.6.4...

WordPress WP-BusinessDirectory Plugin <= 3.1.2 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by LVT-tholv2k in WordPress Plugin WP-BusinessDirectory versions = 3.1.2...

WordPress Vayu Blocks plugin 1.0.4-1.2.1 - Missing Authorization to Unauthenticated Limited Arbitrary Options Update vulnerability

Missing Authorization to Unauthenticated Limited Arbitrary Options Update vulnerability discovered by kr0d in WordPress Plugin Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce versions 1.0.4-1.2.1...

CVE-2025-32279 WordPress Live Forms plugin <= 4.8.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Shahjada Live Forms liveforms.This issue affects Live Forms: from n/a through = 4.8.5...

CVE-2025-32279 WordPress Live Forms plugin <= 4.8.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Shahjada Live Forms liveforms.This issue affects Live Forms: from n/a through = 4.8.5...

WordPress Site Notify plugin <= 1.0 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Vo Thi Ngoc Nhi in WordPress Plugin Site Notify versions = 1.0...

Shopware Broken ACL on Document retrieval to access other customers documents

Impact It's possible to guess the deepLinkCode of an Document to open documents of other customers Patches Update to Shopware 6.6.10.3 or 6.5.8.17 Workarounds For older versions of 6.4, corresponding security measures are also available via a plugin. For the full range of functions, we recommend...

WordPress Motors plugin <= 1.4.66 - Missing Authorization to Authenticated (Subscriber+) Wizard Set-up vulnerability

Missing Authorization to Authenticated Subscriber+ Wizard Set-up vulnerability discovered by Chloe Chamberland in WordPress Plugin Motors versions = 1.4.66...

WordPress Motors plugin <= 1.4.64 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Plugin Installation vulnerability discovered by mikemyers in WordPress Plugin Motors versions = 1.4.64...

WordPress EazyDocs plugin <= 2.7.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin EazyDocs versions = 2.7.1...

WordPress Hive Support plugin <= 1.2.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by stealthcopter in WordPress Plugin Hive Support versions = 1.2.5...

WordPress Flo Forms plugin <= 1.0.43 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Flo Forms versions = 1.0.43...

WordPress CM Registration and Invitation Codes plugin <= 2.5.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin CM Registration and Invitation Codes versions = 2.5.6...