CVE-2025-22681

CVE-2025-22681 describes a Missing Authorization vulnerability in the WordPress Content Cloner plugin, affected versions

CVE-2025-22686

CVE-2025-22686 : WordPress CF7 Google Sheets Connector (GSheetConnector) versions n/a through 5.0.17 contain a Missing Authorization vulnerability due to incorrectly configured access control. This could allow an attacker to exploit access control settings within CF7 Google Sheets Connector. CVSS...

CVE-2025-22260 WordPress Meta Tag Manager plugin <= 3.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Marcus aka @msykes Meta Tag Manager meta-tag-manager.This issue affects Meta Tag Manager: from n/a through = 3.1...

CVE-2024-50500 WordPress Phlox Core Elements plugin <= 2.17.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in averta Shortcodes and extra features for Phlox theme auxin-elements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shortcodes and extra features for Phlox theme: from n/a through = 2.17.4...

CVE-2024-50500 WordPress Phlox Core Elements plugin <= 2.17.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in averta Shortcodes and extra features for Phlox theme auxin-elements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shortcodes and extra features for Phlox theme: from n/a through = 2.17.4...

CVE-2024-50500

CVE-2024-50500 : Missing Authorization in By Averta Shortcodes and Phlox theme features (Shortcodes and extra features for Phlox theme) allows exploitation of insufficient access controls. Affected: WordPress Phlox Core Elements plugin up to version 2.17.2 (and Phlox theme components referenced a...

CVE-2025-22260

CVE-2025-22260: Missing Authorization in WordPress Meta Tag Manager plugin (Pixelite) affects versions n/a through 3.1. CVSS v3.1 base score 4.3 (Medium); impact is limited to Missing Authorization. Connected sources confirm the vulnerability name, affected version range, and that it stems from B...

CVE-2025-24697

CVE-2025-24697 concerns a Missing Authorization vulnerability in the WordPress plugin “Awesome Responsive Photo Gallery” (Image Gallery – Responsive Photo Gallery) up to version 1.0.5. Publicly reported as a broken access control allow­ing unauthorized access to gallery resources. The CVE descrip...

CVE-2025-24697 WordPress Image Gallery – Responsive Photo Gallery plugin <= 1.0.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Realwebcare Image Gallery – Responsive Photo Gallery awesome-responsive-photo-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Gallery – Responsive Photo Gallery: from n/a through = 1.0.5...

CVE-2025-24642 WordPress Setup Default Featured Image plugin <= 1.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in theme funda Setup Default Featured Image allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Setup Default Featured Image: from n/a through 1.2...

CVE-2025-24643

CVE-2025-24643 is a Missing Authorization vulnerability in the WordPress WPGuppy plugin (Amento Tech Pvt Ltd) affecting WPGuppy versions up to 1.1.0. Root cause: insufficient access control on WPGuppy features (e.g., One-to-one chat). Impact: unauthorized actions due to broken authorization. Reme...

CVE-2025-24642

CVE-2025-24642 describes a Missing Authorization (broken access control) vulnerability in the WordPress plugin/theme combination involving the Setup Default Featured Image feature. The initial description notes that an attacker could exploit Incorrectly Configured Access Control Security Levels t...

CVE-2025-24643 WordPress WPGuppy plugin <= 1.1.0 - Broken Authentication vulnerability

Missing Authorization vulnerability in AmentoTech Private Limited WPGuppy wpguppy-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPGuppy: from n/a through = 1.1.0...

CVE-2025-24643 WordPress WPGuppy plugin <= 1.1.0 - Broken Authentication vulnerability

Missing Authorization vulnerability in AmentoTech Private Limited WPGuppy wpguppy-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPGuppy: from n/a through = 1.1.0...

WordPress BookPress – For Book Authors Plugin <= 1.2.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Phat RiO - Fore-Z co.ltd in WordPress Plugin BookPress – For Book Authors versions = 1.2.7...

WordPress Content Cloner plugin <= 1.0.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Pham Van Tam Patchstack Alliance in WordPress Plugin Content Cloner versions = 1.0.1...

WordPress CF7 Google Sheets Connector plugin <= 5.0.17 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by theviper17 Patchstack Alliance in WordPress Plugin CF7 Google Sheets Connector versions = 5.0.17...

WordPress Hide Shipping Method For WooCommerce plugin <= 1.5.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin Hide Shipping Method For WooCommerce versions = 1.5.1...

WordPress Meta Tag Manager plugin <= 3.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Meta Tag Manager versions = 3.1...

WordPress Nirweb support plugin <= 3.0.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Fariq Fadillah Gusti Insani Patchstack Alliance in WordPress Plugin Nirweb support versions = 3.0.3...