CVE-2025-49982 WordPress WP Customer Area plugin <= 8.3.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in aguilatechnologies WP Customer Area customer-area allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Customer Area: from n/a through = 8.3.4...

CVE-2025-49982 WordPress WP Customer Area plugin <= 8.3.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in aguilatechnologies WP Customer Area customer-area allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Customer Area: from n/a through = 8.3.4...

CVE-2025-49993

CVE-2025-49993 covers a Missing Authorization vulnerability in the WordPress Cookie-Script.com plugin (versions ≤ 1.2.1). Attack surface is the plugin’s access control configuration, described as “Broken/Incorrectly Configured Access Control,” enabling exploitation of insufficient authorization c...

CVE-2025-49995 WordPress Download Attachments plugin <= 1.3.1 - Insecure Direct Object References (IDOR) Vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in dFactory Download Attachments allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Download Attachments: from n/a through 1.3.1...

CVE-2025-49998

CVE-2025-49998 is a Missing/Broken Access Control vulnerability in the WordPress plugin WooCommerce Fortnox Integration (versions up to and including 4.5.5). The issue arises from incorrectly configured access control security levels, allowing unauthorized access per the vulnerability description...

CVE-2025-49998 WordPress WooCommerce Fortnox Integration plugin <= 4.5.5 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Wetail WooCommerce Fortnox Integration woocommerce-fortnox-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Fortnox Integration: from n/a through = 4.5.5...

CVE-2025-50008 WordPress WooCommerce Manager – Customize and Control Cart page, Add to Cart button, Checkout fields easily plugin <= 1.2.4.5 - Broken Access Control Vulnerability

Missing Authorization vulnerability in cscode WooCommerce Manager – Customize and Control Cart page, Add to Cart button, Checkout fields easily innovs-woo-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Manager – Customize and Control...

CVE-2025-50010

Zapier for WordPress plugin (WP Zapier) versions

CVE-2025-50010 WordPress Zapier for WordPress plugin <= 1.5.2 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Zapier Zapier for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Zapier for WordPress: from n/a through 1.5.2...

CVE-2025-50034

CVE-2025-50034 concerns the WordPress plugin Enhanced Blocks – Page Builder Blocks for Gutenberg (versions 1.4.1) or apply vendor patches when available. If exploiting details were required, sources indicate network access with low privileges and no user interaction. Public details confirm the vu...

WordPress plugin eDS Responsive Menu 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. An improper access control vulnerability exists in the WordPress eDS Responsive Menu plugin, which stems from a lack of authorization, and no detailed vulnerability details are...

PT-2025-26344 · Unknown · Wanotifier

Name of the Vulnerable Software and Affected Versions: WANotifier versions through 2.7.7 Description: The issue is related to a Missing Authorization vulnerability in WANotifier, allowing the exploitation of incorrectly configured access control security levels. Recommendations: For versions...

WordPress Cookie-Script.com plugin <= 1.2.1 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by domiee13 in WordPress Plugin Cookie-Script.com versions = 1.2.1...

CVE-2025-49234

Missing Authorization vulnerability in Deepak anand WP Dummy Content Generator wp-dummy-content-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Dummy Content Generator: from n/a through = 3.4.6...

Oracle Linux 9 : apache-commons-beanutils (ELSA-2025-9114)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-9114 advisory. Fri Jun 13 2025 Mikolaj Izdebski - Fix improper access control vulnerability - Resolves: CVE-2025-48734 Tenable has extracted the preceding description block...

CVE-2025-23999

Missing Authorization vulnerability in Cloudways Breeze breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breeze: from n/a through = 2.2.13...

apache-commons-beanutils security update

Fri Jun 13 2025 Mikolaj Izdebski - Fix improper access control vulnerability - Resolves: CVE-2025-48734...

CVE-2025-49234 WordPress WP Dummy Content Generator plugin <= 3.4.6 - Arbitrary User Deletion vulnerability

Missing Authorization vulnerability in Deepak anand WP Dummy Content Generator wp-dummy-content-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Dummy Content Generator: from n/a through = 3.4.6...

CVE-2025-49857 WordPress myCred plugin <= 2.9.4.2 - Broken Access Control Vulnerability

Missing Authorization vulnerability in WPExperts.io myCred allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects myCred: from n/a through 2.9.4.2...

CVE-2025-49880

Summary: CVE-2025-49880 affects WordPress CubeWP Forms (versions up to 1.1.5) with a missing authorization flaw enabling attackers to exploit misconfigured access controls. The vulnerability originates from inadequate access control checks in CubeWP Forms and is cataloged with a CVSS v3.1 base sc...