3646 matches found
CVE-2024-56271 WordPress WP SecureSubmit plugin <= 1.5.16 - Broken Access Control vulnerability
Missing Authorization vulnerability in SecureSubmit WP SecureSubmit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP SecureSubmit: from n/a through 1.5.16...
CVE-2024-56271 WordPress WP SecureSubmit plugin <= 1.5.20 - Broken Access Control vulnerability
Missing Authorization vulnerability in SecureSubmit WP SecureSubmit securesubmit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP SecureSubmit: from n/a through = 1.5.20...
CVE-2024-56294
CVE-2024-56294 applies to POSIMYTH Nexter Blocks up to version 4.0.7. Affected component: Nexter Blocks; Root cause: Missing Authorization due to incorrectly configured access control security levels. Impact, as per CVSS: network attack vector, low privileges required, no user interaction, with l...
CVE-2025-22302 WordPress WP Wand plugin <= 1.2.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP Grids WP Wand ai-content-generation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Wand: from n/a through = 1.2.5...
CVE-2025-22304
CVE-2025-22304 is a Missing Authorization vulnerability in the WP Visitor Statistics (Real Time Traffic) WordPress plugin. The Red Hat/Wordfence references identify an unauthenticated access issue that could allow unauthorized actions or data access; CVSSv3.1 base score 4.3 (Medium) with network ...
CVE-2024-55407
An issue in the DeviceloControl function of ITE Tech. Inc ITE IO Access v1.0.0.0 allows attackers to perform arbitrary port read and write actions via supplying crafted IOCTL requests...
D-Link DIR-816 A2 Improper Access Control Vulnerability
The D-Link DIR-816 A2 is a wireless router from AUO D-Link of Taiwan, China. An improper access control vulnerability exists in the D-Link DIR-816 A2. The vulnerability originates from /goform/DDNS in the DDNS Service component and can be exploited by an attacker to access and manipulate the DDNS...
Cisco IOS Software and IOS XE Software Access Control Error Vulnerability
Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. An access control error vulnerability exists in the Simple Network Management Protocol SNMP IPv4 access control list feature of Cisco IOS Software and IOS XE Software, which stems from the program not...
CVE-2023-47778
Missing Authorization vulnerability in LuckyWP LuckyWP Scripts Control luckywp-scripts-control allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LuckyWP Scripts Control: from n/a through = 1.2.1...
CVE-2023-45633
Missing Authorization vulnerability in IDX IMPress Listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IMPress Listings: from n/a through 2.6.2...
CVE-2023-45272
Missing Authorization vulnerability in 10Web 10Web Map Builder for Google Maps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 10Web Map Builder for Google Maps: from n/a through 1.0.73...
CVE-2022-47601 WordPress WP Table Manager plugin <= 3.5.2 - Broken Access Control
Missing Authorization vulnerability in JoomUnited WP Table Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Table Manager: from n/a through 3.5.2...
CVE-2023-32240 WordPress Woodmart theme <= 7.2.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in xtemos WoodMart woodmart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WoodMart: from n/a through = 7.2.1...
CVE-2023-40327 WordPress Putler Connector for WooCommerce plugin <= 2.12.0 - Unauthenticated Broken Access Control vulnerability
Missing Authorization vulnerability in Putler / Storeapps Putler Connector for WooCommerce.This issue affects Putler Connector for WooCommerce: from n/a through 2.12.0...
CVE-2023-45272 WordPress 10Web Map Builder for Google Maps plugin <= 1.0.73 - Notice Dismissal Vulnerability
Missing Authorization vulnerability in 10Web 10Web Map Builder for Google Maps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 10Web Map Builder for Google Maps: from n/a through 1.0.73...
CVE-2023-47807 WordPress 10WebAnalytics plugin <= 1.2.12 - Broken Access Control vulnerability
Missing Authorization vulnerability in 10Web 10WebAnalytics wd-google-analytics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 10WebAnalytics: from n/a through = 1.2.12...
CVE-2023-48739 WordPress Porto Theme Functionality plugin < 2.12.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Porto Theme Porto Theme - Functionality porto-functionality allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Porto Theme - Functionality: from n/a through 2.12.1...
CVE-2024-56255
Missing Authorization vulnerability in Stiofan AyeCode Connect ayecode-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AyeCode Connect: from n/a through = 1.3.8...
CVE-2023-47693
Missing Authorization vulnerability in Themefic Ultimate Addons for Contact Form 7 ultimate-addons-for-contact-form-7 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Addons for Contact Form 7: from n/a through = 3.2.6...