16041 matches found
CVE-2025-32218 WordPress TableOn plugin <= 1.0.5.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in RealMag777 TableOn posts-table-filterable allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TableOn: from n/a through = 1.0.5.1...
CVE-2025-32219 WordPress eaSYNC plugin <= 1.3.19 - Broken Access Control vulnerability
Missing Authorization vulnerability in Syntactics, Inc. eaSYNC easync-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eaSYNC: from n/a through = 1.3.19...
CVE-2025-32217 WordPress Ai Image Alt Text Generator for WP plugin <= 1.1.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP Messiah Ai Image Alt Text Generator for WP ai-image-alt-text-generator-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ai Image Alt Text Generator for WP: from n/a through = 1.1.1...
CVE-2025-32217 WordPress Ai Image Alt Text Generator for WP plugin <= 1.0.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP Messiah Ai Image Alt Text Generator for WP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Ai Image Alt Text Generator for WP: from n/a through 1.0.8...
CVE-2025-32201
CVE-2025-32201 : Missing Authorization in the WordPress plugin Xpro Theme Builder affects versions from n/a up to 1.2.8.3. The provided documents include limited technical details (affected version range, vulnerability class) and CVSS v3.1 data (base score 4.3, medium). No explicit root cause, ex...
CVE-2025-32147 WordPress Easy WP Optimizer Plugin <= 1.1.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in coothemes Easy WP Optimizer easy-wp-optimizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy WP Optimizer: from n/a through = 1.1.0...
CVE-2025-32147 WordPress Easy WP Optimizer Plugin <= 1.1.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in coothemes Easy WP Optimizer easy-wp-optimizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy WP Optimizer: from n/a through = 1.1.0...
CVE-2025-32147
Technical details about CVE-2025-32147 (Easy WP Optimizer) are not provided in the supplied documents; no product version, root cause, impact, or remediation details are documented here. Monitor for updates.
CVE-2025-22285 WordPress Pallet Packaging for WooCommerce Plugin <= 1.1.15 - Broken Access Control vulnerability
Missing Authorization vulnerability in enituretechnology Pallet Packaging for WooCommerce pallet-packaging-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pallet Packaging for WooCommerce: from n/a through = 1.1.15...
CVE-2025-22285 WordPress Pallet Packaging for WooCommerce Plugin <= 1.1.15 - Broken Access Control vulnerability
Missing Authorization vulnerability in enituretechnology Pallet Packaging for WooCommerce pallet-packaging-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pallet Packaging for WooCommerce: from n/a through = 1.1.15...
CVE-2025-31381 WordPress Booking Calendar and Notification plugin <= 4.0.3 - Broken Authentication vulnerability
Missing Authorization vulnerability in shiptrack Booking Calendar and Notification booking-calendar-and-notification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking Calendar and Notification: from n/a through = 4.0.3...
CVE-2025-31381 WordPress Booking Calendar and Notification plugin <= 4.0.3 - Broken Authentication vulnerability
Missing Authorization vulnerability in shiptrack Booking Calendar and Notification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking Calendar and Notification: from n/a through 4.0.3...
CVE-2025-31381
CVE-2025-31381 describes a Missing Authorization (authentication bypass) vulnerability in the Booking Calendar and Notification WordPress plugin, affecting versions up to 4.0.3. Primary documentation lists this as a Missing Authorization issue with a CVSS v3.1 base score of 6.5 (Network access, n...
WordPress Live Forms plugin <= 4.8.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Mika in WordPress Plugin Live Forms versions = 4.8.5...
WordPress RepairBuddy plugin <= 3.8213 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Dhabaleshwar Das in WordPress Plugin RepairBuddy versions = 3.8213...
WordPress UltraAddons – Elementor Addons plugin <= 2.0.2 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin UltraAddons Elementor Lite versions = 2.0.2...
WordPress DethemeKit For Elementor plugin <= 2.1.10 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Mika in WordPress Plugin DethemeKit For Elementor versions = 2.1.10...
WordPress Simple Website Logo plugin <= 1.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Mika in WordPress Plugin Simple Website Logo versions = 1.1...