CVE-2025-30288 ColdFusion | Improper Access Control (CWE-284)

ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low privileged attacker with local access could leverage this vulnerability to bypass security protections and execute code...

PT-2025-15657 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.0, 2023.12, 2021.18 and earlier Description: The issue is related to an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass...

PT-2025-15648 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7-p4 through 2.4.8-beta2 and earlier Description: The issue is related to an improper access control vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to...

CVE-2025-32235

Missing Authorization vulnerability in sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar mp3-music-player-by-sonaar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through = 5.9.4...

CVE-2025-32147

Missing Authorization vulnerability in coothemes Easy WP Optimizer easy-wp-optimizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy WP Optimizer: from n/a through = 1.1.0...

CVE-2025-32234

CVE-2025-32234 : Missing/incorrect Authorization in the AdMail – Multilingual Back in-Stock Notifier for WooCommerce WordPress plugin, affecting from n/a through 1.7.0. Underlying issue is misconfigured access control; CVSS 3.1 base score 4.3 (Medium). No public exploit details or fixes are provi...

CVE-2025-32232 WordPress StaffList plugin <= 3.2.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in ERA404 StaffList stafflist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects StaffList: from n/a through = 3.2.7...

CVE-2025-31820

Missing Authorization vulnerability in webdevstudios Automatic Featured Images from Videos automatic-featured-images-from-videos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Automatic Featured Images from Videos: from n/a through = 1.2.4...

CVE-2025-31876 WordPress Payday plugin <= 3.3.18 - Broken Access Control vulnerability

Missing Authorization vulnerability in gunnarpayday Payday payday allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Payday: from n/a through = 3.3.18...

CVE-2025-31758

Technical details about CVE-2025-31758 are not publicly provided in the connected documents. The initial description contains basic context but no concrete affected product versions, root cause, exploit vectors, or remediation details in the supplied materials. Monitor for updates.

CVE-2025-31746

Technical details for CVE-2025-31746 (Think201 Clients plugin) are not provided in the supplied documents. No confirmed affected products, root cause, or remediation are disclosed here; monitor official advisories and feeds for updates.

CVE-2025-31541 WordPress TuriTop Booking System plugin <= 1.0.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in turitop TuriTop Booking System allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects TuriTop Booking System: from n/a through 1.0.10...

PT-2025-14742 · Unknown · Local Magic

Name of the Vulnerable Software and Affected Versions: matthewrubin Local Magic versions n/a through 2.6.0 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions n/a...

PT-2025-14754 · Apptivo · Apptivo Business Site Crm

Name of the Vulnerable Software and Affected Versions: Apptivo Business Site CRM versions n/a through 5.3 Description: The issue is related to a Missing Authorization vulnerability, allowing the exploitation of incorrectly configured access control security levels. Recommendations: For Apptivo...

PT-2025-14709 · Enituretechnology · Enituretechnology Small Package Quotes – Worldwide Express Edition

Name of the Vulnerable Software and Affected Versions: enituretechnology Small Package Quotes – Worldwide Express Edition versions 5.2.19 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security...

CVE-2025-31528

Missing Authorization vulnerability in wokamoto StaticPress staticpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects StaticPress: from n/a through = 0.4.5...

CVE-2025-31846

Missing Authorization vulnerability in Jeroen Schmit Theater for WordPress theatre allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Theater for WordPress: from n/a through = 0.18.7...

CVE-2025-31826

Missing Authorization vulnerability in Anzar Ahmed Ni WooCommerce Cost Of Goods ni-woocommerce-cost-of-goods allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ni WooCommerce Cost Of Goods: from n/a through = 3.2.8...

CVE-2025-31886 WordPress Social proof testimonials and reviews by Repuso plugin <= 5.21 - Broken Access Control vulnerability

Missing Authorization vulnerability in Repuso Social proof testimonials and reviews by Repuso social-testimonials-and-reviews-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social proof testimonials and reviews by Repuso: from n/a through = 5.21...

CVE-2025-31816 WordPress Mobile App Canvas Plugin <= 3.8.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in pietro Mobile App Canvas mobile-app allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mobile App Canvas: from n/a through = 3.8.2...