CVE-2025-47560

MapSVG WordPress plugin CVE-2025-47560: A Missing Authorization / Broken Access Control vulnerability affects MapSVG versions before 8.6.13 (up to 8.5.32 noted by Patchstack/Wordfence context). Exploitation could occur due to incorrectly configured access control security levels, enabling unautho...

CVE-2025-48128

CVE-2025-48128 describes a Missing Authorization vulnerability in the Sharespine Woocommerce Connector (WordPress plugin) affecting versions up to 4.7.55. The NVD/NVD-related entries and PatchStack reference confirm the issue and patched status for the affected plugin. The CVSS v3.1 base score is...

CVE-2025-48127 WordPress Push notification for Mobile and Web app plugin <= 2.0.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in App Cheap Push notification for Mobile and Web app push-notification-mobile-and-web-app allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Push notification for Mobile and Web app: from n/a through = 2.0.3...

CVE-2025-48116 WordPress EventON <= 2.4.4 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Ashan Perera EventON allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects EventON: from n/a through 2.4.4...

PT-2025-21673 · Unknown · Themeton The Business

Name of the Vulnerable Software and Affected Versions: themeton The Business versions 1.6.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For themeton...

PT-2025-21668 · Wishlist · Wishlist

Name of the Vulnerable Software and Affected Versions: Wishlist versions 2.1.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For versions 2.1.0 and...

CVE-2024-45371

Improper access control for some IntelR Arc™ & IrisR Xe graphics software before version 32.0.101.6077 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-20100

Improper access control in the memory controller configurations for some IntelR XeonR 6 processor with E-cores may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-47580 WordPress Front End Users plugin <= 3.2.35 - Broken Access Control vulnerability

Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Front End Users: from n/a through = 3.2.35...

CVE-2025-47580 WordPress Front End Users plugin <= 3.2.32 - Sensitive Data Exposure vulnerability

Missing Authorization vulnerability in Rustaurius Front End Users allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Front End Users: from n/a through 3.2.32...

CVE-2025-2527 Improper access control to group information

Mattermost versions 10.5.x = 10.5.2, 9.11.x = 9.11.11 failed to properly verify a user's permissions when accessing groups, which allows an attacker to view group information via an API request...

Google Chrome Security Bypass Vulnerability (CNVD-2025-10055)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome prior to version 136.0.7103.59, which stems from an improper implementation in DevTools, and can be exploited by an attacker to cause an access control bypass...

CVE-2025-22844

Improper access control for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an unauthenticated user to potentially enable information disclosure via adjacent access...

CVE-2024-43101

Improper access control for some IntelR Data Center GPU Flex Series for Windows driver software before version 31.0.101.4255 may allow an authenticated user to potentially enable denial of service via local access...

PT-2025-21053 · Intel · Intel Arc & Iris Xe Graphics

Name of the Vulnerable Software and Affected Versions: IntelR Arc™ & IrisR Xe graphics software versions prior to 31.0.101.4032 Description: The issue is related to improper access control in some IntelR Arc™ & IrisR Xe graphics software, which may allow an authenticated user to potentially enabl...

PT-2025-21055 · Intel · Intel Data Center Gpu Flex Series

Name of the Vulnerable Software and Affected Versions: IntelR Data Center GPU Flex Series for Windows versions prior to 31.0.101.4255 Description: The issue is related to improper access control in the IntelR Data Center GPU Flex Series for Windows driver software. This may allow an authenticated...

PT-2025-21057 · Intel · Intel Arc +1

Name of the Vulnerable Software and Affected Versions: IntelR Arc™ and IrisR Xe graphics software versions prior to 32.0.101.6077 Description: The issue is related to improper access control for some IntelR Arc™ and IrisR Xe graphics software. This may allow an authenticated user to potentially...

PT-2025-21112 · Intel · Intel Tiber Edge Platform Edge Orchestrator

Name of the Vulnerable Software and Affected Versions: IntelR Tiber™ Edge Platform Edge Orchestrator software affected versions not specified Description: The issue is related to improper access control in the Edge Orchestrator software for IntelR Tiber™ Edge Platform. This may allow an...

CVE-2025-1278 Insufficient Granularity of Access Control in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 12.0 before 17.9.8, 17.10 before 17.10.6, and 17.11 before 17.11.2. Under certain conditions users could bypass IP access restrictions and view sensitive information...

CVE-2025-1278

GitLab CE/EE contains CVE-2025-1278: an issue in which, under certain conditions, users could bypass IP access restrictions and view sensitive information. Affected versions are GitLab from 12.0 up to 17.9.8 (pre-17.9.8), 17.10 up to 17.10.6 (pre-17.10.6), and 17.11 up to 17.11.2 (pre-17.11.2). T...