PT-2025-15336 · Unknown · Sticker Center

Name of the Vulnerable Software and Affected Versions: Sticker Center versions prior to SMR Apr-2025 Release 1 Description: The issue is related to improper access control in the Sticker Center, allowing local attackers to access image files with system privileges. Recommendations: For versions...

PT-2025-15315 · Unknown · Lenve Vblog

Name of the Vulnerable Software and Affected Versions: Lenve VBlog versions up to 1.0.0 Description: A critical issue was found, affecting the configure function of the WebSecurityConfig.java file. This leads to improper access controls, allowing remote attacks. The issue has been publicly...

PT-2025-15339

Name of the Vulnerable Software and Affected Versions: SamsungContacts versions prior to SMR Apr-2025 Release 1 Description: The issue is related to improper access control, allowing local attackers to access protected data. This affects SamsungContacts, potentially exposing sensitive information...

CVE-2025-30915

Missing Authorization vulnerability in enituretechnology Small Package Quotes – Worldwide Express Edition small-package-quotes-wwe-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Small Package Quotes – Worldwide Express Edition: from n/a through ...

CVE-2025-31789

Missing Authorization vulnerability in Matat Technologies TextMe SMS textme-sms-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TextMe SMS: from n/a through = 1.9.1...

CVE-2025-31758

Missing Authorization vulnerability in BinaryCarpenter Free Woocommerce Product Table View free-product-table-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Free Woocommerce Product Table View: from n/a through = 1.78...

CVE-2025-32252

Missing Authorization vulnerability in Black and White WP Genealogy – Your Family History Website wpgenealogy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Genealogy – Your Family History Website: from n/a through = 0.1.9...

CVE-2025-32219

Missing Authorization vulnerability in Syntactics, Inc. eaSYNC easync-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eaSYNC: from n/a through = 1.3.19...

CVE-2025-32146

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in JoomSky JS Job Manager js-jobs allows PHP Local File Inclusion.This issue affects JS Job Manager: from n/a through = 2.0.2...

CVE-2025-32258

CVE-2025-32258 describes a missing authorization issue in the WordPress plugin Simple Website Logo . The vulnerability arises from incorrectly configured access control security levels, enabling exploitation of restricted operations by unauthorized actors. The description notes the affected range...

CVE-2025-32246 WordPress 1-Click Backup & Restore Database <= 1.0.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Tim Nguyen 1-Click Backup & Restore Database allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects 1-Click Backup & Restore Database: from n/a through 1.0.3...

CVE-2025-3237

CVE-2025-3237 affects Tenda FH1202 (version 1.2.0.14(408)). The vulnerability stems from improper access control when handling the file /goform/wrlwpsset, allowing a remote attacker to exploit it. Multiple sources corroborate remote exploitation and public disclosure of the exploit. The reports d...

CVE-2025-31846

Missing Authorization vulnerability in Jeroen Schmit Theater for WordPress theatre allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Theater for WordPress: from n/a through = 0.18.7...

CVE-2025-31831

Missing Authorization vulnerability in Team AtomChat AtomChat atomchat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AtomChat: from n/a through = 1.1.7...

CVE-2025-31834

Missing Authorization vulnerability in themeglow JobBoard Job listing job-board-light allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobBoard Job listing: from n/a through = 1.2.8...

CVE-2025-31887

Missing Authorization vulnerability in zookatron MyBookProgress by Stormhill Media mybookprogress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MyBookProgress by Stormhill Media: from n/a through = 1.0.8...

CVE-2025-31757

Missing Authorization vulnerability in BinaryCarpenter Free Woocommerce Product Table View free-product-table-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Free Woocommerce Product Table View: from n/a through = 1.78...

PT-2025-14733 · Binary Carpenter · Binarycarpenter Free Woocommerce Product Table View

Name of the Vulnerable Software and Affected Versions: BinaryCarpenter Free Woocommerce Product Table View versions 1.78 and earlier Description: The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This can...

CVE-2024-54767

An access control issue in the component /juisboxinfo.xml of AVM FRITZ!Box 7530 AX v7.59 allows attackers to obtain sensitive information without authentication. NOTE: this is disputed by the Supplier because it cannot be reproduced, and the issue report focuses on an unintended configuration wit...

PT-2025-14535 · Trend Micro · Trend Vision One Status

Name of the Vulnerable Software and Affected Versions: Trend Vision One Status component affected versions not specified Description: A broken access control issue was previously discovered in the Trend Vision One Status component. This could have allowed an administrator to create users who coul...