CVE-2025-22983

An access control issue in the component /square/getAllSquare/circle of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information...

CVE-2025-22984

An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information...

CVE-2025-22984

The iceCMS content management system (v2.2.0) is affected by an access control issue in the /api/squareComment/DelectSquareById component. This vulnerability allows unauthenticated attackers to access sensitive information due to improper access controls. While no official patch is currently iden...

CVE-2025-22983

A security vulnerability exists in iceCMS version 2.2.0 due to an access control issue in the /square/getAllSquare/circle component. This flaw allows unauthenticated attackers to access sensitive information . As a temporary workaround, it is recommended to restrict access to this specific compon...

CVE-2025-22984

An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information...

CVE-2024-46310

Incorrect Access Control in Cfx.re FXServer v9601 and earlier allows unauthenticated users to modify and read arbitrary user data via exposed API endpoint...

CVE-2024-56272

CVE-2024-56272 corresponds to a Missing Authorization vulnerability in the WordPress plugin Hide Category by User Role for WooCommerce. Connected Red Hat advisory RH-CVE-2024-56272 repeats the same description for the affected plugin, noting the issue exists for versions up to 2.1.1. The provided...

CVE-2025-22543 WordPress ST Gallery WP plugin <= 1.0.8 - Settings Change vulnerability

Missing Authorization vulnerability in Beautiful Templates ST Gallery WP allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ST Gallery WP: from n/a through 1.0.8...

CVE-2024-56276

CVE-2024-56276 is a Missing Authorization vulnerability in WPForms Contact Form (WPForms Lite) that affects Contact Form by WPForms: from n/a through 1.9.2.2. The root cause is misconfigured access control security levels, enabling unauthorized access to or manipulation of form-related functional...

CVE-2025-22299

CVE-2025-22299 is a Missing Authorization / Broken Access Control vulnerability in the WordPress plugin AI for SEO (Bulk Generate Metadata, Alt Text, Image Titles, Captions, Descriptions). Affected versions range up to 1.2.9. Evidence from multiple sources confirms the issue is real and publicly ...

CVE-2025-22304 WordPress WP Visitor Statistics plugin <= 7.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in osama.esh WP Visitor Statistics Real Time Traffic wp-stats-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Visitor Statistics Real Time Traffic: from n/a through = 7.5...

CVE-2024-54767

An access control issue in the component /juisboxinfo.xml of AVM FRITZ!Box 7530 AX v7.59 allows attackers to obtain sensitive information without authentication. NOTE: this is disputed by the Supplier because it cannot be reproduced, and the issue report focuses on an unintended configuration wit...

CVE-2024-54764

An access control issue in the component /login/hostinfo2.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensitive information without authentication...

CVE-2024-54763

An access control issue in the component /login/hostinfo.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensitive information without authentication...

CVE-2024-54763

An access control issue in the component /login/hostinfo.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensitive information without authentication...

CVE-2024-54764

An access control issue in the component /login/hostinfo2.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensitive information without authentication...

CVE-2024-54763

An access control issue in the component /login/hostinfo.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensitive information without authentication...

CVE-2024-54764

An access control issue in the component /login/hostinfo2.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensitive information without authentication...

CVE-2024-54767

An access control issue in the component /juisboxinfo.xml of AVM FRITZ!Box 7530 AX v7.59 allows attackers to obtain sensitive information without authentication. NOTE: this is disputed by the Supplier because it cannot be reproduced, and the issue report focuses on an unintended configuration wit...

CVE-2024-54767

The AVM FRITZ!Box 7530 AX (v7.59) is affected by an access control issue in the /juis_boxinfo.xml component. This vulnerability allows unauthenticated attackers to obtain sensitive device information, such as firmware versions , serial numbers , and configuration details . While the supplier disp...