CVE-2025-31755 WordPress pCloud Backup plugin <= 1.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in josselynj pCloud Backup allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects pCloud Backup: from n/a through 1.0.1...

CVE-2025-31415 WordPress YayExtra <= 1.5.2 - Broken Access Control Vulnerability

Missing Authorization vulnerability in YayCommerce YayExtra allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects YayExtra: from n/a through 1.5.2...

CVE-2025-30926 WordPress King Addons for Elementor plugin <= 24.12.58 - Broken Access Control Vulnerability

Missing Authorization vulnerability in KingAddons.com King Addons for Elementor king-addons.This issue affects King Addons for Elementor: from n/a through = 24.12.58...

CVE-2025-30797 WordPress Greek Multi Tool – Fix peralinks, accents, auto create menus and more plugin <= 2.3.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in bigdrop.gr Greek Multi Tool – Fix peralinks, accents, auto create menus and more greek-multi-tool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Greek Multi Tool – Fix peralinks, accents, auto create menus and more...

PT-2025-14226 · WordPress · Wpfactory Wordpress Adverts Plugin

Name of the Vulnerable Software and Affected Versions: WPFactory WordPress Adverts Plugin versions 1.4 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: F...

PT-2025-14254 · Unknown · Upc/Ean/Gtin Code Generator

Name of the Vulnerable Software and Affected Versions: UPC/EAN/GTIN Code Generator versions through 2.0.2 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions throug...

PT-2025-14244 · Joomsky · Joomsky Js Job Manager

Name of the Vulnerable Software and Affected Versions: JoomSky JS Job Manager versions through 2.0.2 Description: The issue affects the access control security levels in JoomSky JS Job Manager, allowing for authorization bypass through user-controlled key exploitation. This occurs due to...

CVE-2025-31618

Missing Authorization vulnerability in Jaap Jansma Connector to CiviCRM with CiviMcRestFace connector-civicrm-mcrestface allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Connector to CiviCRM with CiviMcRestFace: from n/a through = 1.0.10...

CVE-2025-31539

Missing Authorization vulnerability in Blocksera Cryptocurrency Widgets Pack cryptocurrency-widgets-pack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cryptocurrency Widgets Pack: from n/a through = 2.0.1...

CVE-2025-31529

Missing Authorization vulnerability in Rashid Slider Path for Elementor slider-path allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Slider Path for Elementor: from n/a through = 3.0.0...

CVE-2025-31545 WordPress Safe Ai Malware Protection for WP plugin <= 1.0.20 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Messiah Safe Ai Malware Protection for WP safe-ai-malware-protection-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Safe Ai Malware Protection for WP: from n/a through = 1.0.20...

CVE-2025-31530 WordPress Google SEO Pressor Snippet plugin <= 2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Smackcoders Inc., Google SEO Pressor Snippet google-seo-author-snippets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Google SEO Pressor Snippet: from n/a through = 2.0...

CVE-2025-2990

CVE-2025-2990 affects the Tenda FH1202 Web Management Interface, specifically the AdvSetWrlGstset path. The root cause is improper access controls in processing the request, which may permit remote exploitation. The vulnerability has been publicly disclosed and is exploitable over the network; th...

CVE-2025-31406

Technical details about CVE-2015-31406 are not provided in the supplied documents. Monitor official advisories for affected versions, impact, and remediation.

CVE-2025-31406 WordPress ELEX WooCommerce Request a Quote plugin <= 2.3.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in ELEXtensions ELEX WooCommerce Request a Quote elex-request-a-quote allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ELEX WooCommerce Request a Quote: from n/a through = 2.3.9...

CVE-2025-30855

CVE-2025-30855 corresponds to a Missing Authorization vulnerability in Ads by WPQuads (plugin: Ads by WPQuads) affecting versions up to 2.0.87.1. Connected sources confirm that this is a Missing Authorization issue (unprotected access control) with potential unauthorized access to configuration, ...

CVE-2025-31417 WordPress WP Docs plugin < 2.2.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Fahad Mahmood WP Docs allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Docs: from n/a through n/a...

CVE-2025-3014

The CVE-2025-3014 entry concerns NightWolf Penetration Testing Tracking version 2.1.4, where an Improper Access Control leads to Insecure Direct Object References (IDOR). The vulnerability arises from allowing manipulation of request parameters or object references to access unauthorized data. Pu...

CVE-2025-2955

The CVE-2025-2955 entry concerns TOTOLINK A3000RU (up to 5.9c.5185) and a flaw in the IBMS Configuration File Handler, specifically in /cgi-bin/ExportIbmsConfig.sh. The root cause is improper access controls on the ExportIbmsConfig.sh endpoint, which can be triggered remotely. The issue is associ...

CVE-2025-22740

Missing Authorization vulnerability in Automattic Sensei LMS sensei-lms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sensei LMS: from n/a through = 4.24.4...