PT-2025-39586

Name of the Vulnerable Software and Affected Versions Netgsm versions through 2.9.58 Description An authorization issue exists in Netgsm, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update Netgsm to a version later than 2.9.58...

PT-2025-39536

Name of the Vulnerable Software and Affected Versions shinetheme Traveler affected versions not specified Description An issue exists in shinetheme Traveler related to incorrectly configured access control security levels, allowing for missing authorization. Recommendations At the moment, there i...

CVE-2025-58009

Missing Authorization vulnerability in codepeople CP Multi View Event Calendar cp-multi-view-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CP Multi View Event Calendar : from n/a through = 1.4.36...

CVE-2025-57957

Missing Authorization vulnerability in wpcraft WooMS wooms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooMS: from n/a through = 9.12...

CVE-2025-53452

Missing Authorization vulnerability in Barry Event Rocket allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Event Rocket: from n/a through 3.3...

PT-2025-38772

Name of the Vulnerable Software and Affected Versions N-Media Frontend File Manager versions through 23.2 Description An authorization issue exists in N-Media Frontend File Manager due to incorrectly configured access control security levels. This allows for exploitation of the system...

PT-2025-38969

Name of the Vulnerable Software and Affected Versions Jürgen Müller Easy Quotes versions through 1.2.4 Description An authorization issue exists in Jürgen Müller Easy Quotes, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update Jürgen Müller...

PT-2025-38887

Name of the Vulnerable Software and Affected Versions ONTRAPORT PilotPress versions through 2.0.35 Description A missing authorization issue exists in ONTRAPORT PilotPress, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update ONTRAPORT...

PT-2025-38826

Name of the Vulnerable Software and Affected Versions CardCom Payment Gateway versions through 3.5.0.4 Description An authorization issue exists in CardCom Payment Gateway due to incorrectly configured access control security levels. This allows for potential exploitation. Recommendations Update ...

PT-2025-38786

Name of the Vulnerable Software and Affected Versions Meitar Subresource Integrity SRI Manager versions through 0.4.0 Description An authorization issue exists in Meitar Subresource Integrity SRI Manager, allowing exploitation due to incorrectly configured access control security levels...

PT-2025-38841

Name of the Vulnerable Software and Affected Versions Clariti versions through 1.2.1 Description An authorization issue exists in Clariti, allowing exploitation of incorrectly configured access control security levels. Recommendations At the moment, there is no information about a newer version...

CVE-2025-58981

Missing Authorization vulnerability in Equalize Digital Accessibility Checker by Equalize Digital accessibility-checker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Checker by Equalize Digital: from n/a through = 1.31.0...

CVE-2025-58979

Missing Authorization vulnerability in BerqWP BerqWP searchpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BerqWP: from n/a through = 2.2.53...

PT-2025-36802

Name of the Vulnerable Software and Affected Versions: Equalize Digital Accessibility Checker versions n/a through 1.31.0 Description: The Accessibility Checker by Equalize Digital is affected by a missing authorization issue. This allows exploitation due to incorrectly configured access control...

CVE-2025-58622

Missing Authorization vulnerability in yydevelopment Mobile Contact Line mobile-contact-line allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mobile Contact Line: from n/a through = 2.4.0...

CVE-2025-58783

Missing Authorization vulnerability in gutentor Gutentor gutentor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutentor: from n/a through = 3.5.5...

CVE-2025-58193

Missing Authorization vulnerability in Uncanny Owl Uncanny Automator uncanny-automator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Automator: from n/a through = 6.7.0.1...

CVE-2025-53337

Missing Authorization vulnerability in Ashan Perera LifePress lifepress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LifePress: from n/a through = 2.1.3...

CVE-2025-48348

Incorrect Privilege Assignment vulnerability in chandrashekharsahu Site Offline site-offline allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Offline: from n/a through = 1.5.7...

CVE-2025-49402

CVE-2025-49402 corresponds to a SQL Injection in WordPress Exertio Framework up to version 1.3.3. The root cause is improper neutralization of user-controlled input in the framework’s SQL queries, enabling blind SQL injection. Affected software: Exertio Framework (scriptsbundle exertio-framework)