CVE-2024-38727

CVE-2024-38727 is a Missing Authorization (broken access control) vulnerability affecting the Seraphinite Post .DOCX Source WordPress plugin. The public record indicates the issue exists in Seraphinite Post .DOCX Source versions from unknown/n/a through 2.16.9 and does not provide product-specifi...

CVE-2024-38777

CVE-2024-38777 is a Missing Authorization / Broken Access Control vulnerability in CreativeMotion Titan Anti-spam & Security (WordPress Titan Anti-spam & Security) affecting versions up to 7.3.6. Exploitation could arise from incorrectly configured access control levels, enabling unauthorized act...

CVE-2024-38777 WordPress Titan Anti-spam & Security plugin <= 7.3.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in CreativeMotion Titan Anti-spam & Security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Titan Anti-spam & Security: from n/a through 7.3.6...

CVE-2024-39635

CVE-2024-39635 describes a Broken Access Control vulnerability in the WordPress plugin Youzify, caused by missing authorization. Affected versions are Youzify up to 1.2.6. Patchstack and related sources indicate the fix is in version 1.2.8. Suggested remediation: update to Youzify 1.2.8 or later ...

CVE-2024-39640

CVE-2024-39640: WordPress WP Social Feed Gallery (insta-gallery)

CVE-2024-39639

CVE-2024-39639 affects WordPress File Upload plugin (≤4.24.7). Root cause is Broken Access Control, with Patchstack noting CSRF involvement. Impact is reported as low to medium (CVSS 3.5–4.3 range); patched in version 4.24.8. No exploitation status provided in the sources; monitor for updates fro...

CVE-2024-39654

CVE-2024-39654 concerns WordPress Sign-up Sheets plugin (versions

CVE-2024-39654 WordPress Sign-up Sheets plugin <= 2.2.12 - Broken Access Control vulnerability

Missing Authorization vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets.This issue affects Sign-up Sheets: from n/a through = 2.2.12...

CVE-2024-43119

CVE-2024-43119 is a Missing Authorization vulnerability in Aruba HiSpeed Cache (WordPress plugin) affecting 2.0.12 and earlier. The vulnerability arises from incorrectly configured access control security levels. CVSS 3.1 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) indicates network access with low pri...

CVE-2024-43119 WordPress Aruba HiSpeed Cache plugin <= 2.0.12 - Broken Access Control vulnerability

Missing Authorization vulnerability in Aruba.It Aruba HiSpeed Cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Aruba HiSpeed Cache: from n/a through 2.0.12...

CVE-2024-43119 WordPress Aruba HiSpeed Cache plugin <= 2.0.12 - Broken Access Control vulnerability

Missing Authorization vulnerability in Aruba.It Aruba HiSpeed Cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Aruba HiSpeed Cache: from n/a through 2.0.12...

CVE-2024-43122

CVE-2024-43122 describes a Missing Authorization (Broken/Incorrect Access Control) vulnerability in the Robin image optimizer WordPress plugin, affecting version 1.6.9 and earlier. The CVE notes that exploitation requires Network access with Low attack complexity and Low privileges, with potentia...

CVE-2024-43136

CVE-2024-43136 corresponds to a Missing Authorization/Broken Access Control vulnerability in the Sunshine Photo Cart WordPress plugin (Sunshine Photo Cart) affecting versions up to and including 3.2.1. Connected sources identify this as a Broken Access Control issue; the advisory notes affected s...

CVE-2024-43134 WordPress Waitlist Woocommerce plugin <= 2.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in xootix Waitlist Woocommerce Back in stock notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Waitlist Woocommerce Back in stock notifier : from n/a through 2.6...

CVE-2024-43134

CVE-2024-43134 concerns the Waitlist Woocommerce (Back in stock notifier) plugin. The vulnerability is described as Missing Authorization due to incorrectly configured access control, affecting plugin releases up to version 2.6 (vulnerable range shown as n/a–2.6). The CVSS Base Score is MEDIUM (4...

CVE-2024-43143

CVE-2024-43143 is a Missing Authorization vulnerability in the WordPress plugin Registrations for the Events Calendar (Roundup WP Registrations) affecting versions from n/a through 2.12.1. The connected sources confirm a broken access control issue allowing exploitation via misconfigured authoriz...

CVE-2024-43154

CVE-2024-43154 is a Missing Authorization (broken access control) vulnerability in BracketSpace Advanced Cron Manager for WordPress, affecting debug & control up to version 2.5.9. Public sources indicate this plugin allows unauthorized access due to misconfigured access controls. Remediation from...

CVE-2024-43157

CVE-2024-43157 (WordPress FormCraft) is documented in multiple sources with concrete technical details in connected docs: FormCraft (WordPress Form Builder) versions 1.2.10 and earlier are affected by a Missing Authorization vulnerability due to incorrectly configured access control. The issue is...

CVE-2024-43162

CVE-2024-43162 is a Missing Authorization vulnerability in WordPress Easy Digital Downloads (EDDs) plugin, affecting EDDs versions up to 3.2.12. The connected sources describe it as a Broken Access Control issue caused by Incorrectly Configured Access Control Security Levels that could enable an ...

CVE-2024-43208

CVE-2024-43208 describes a Missing Authorization vulnerability in the WordPress plugin Send Emails with Mandrill (Miller Media). Affected versions are 1.4.1 and earlier, with exploitability stemming from misconfigured access control. Public sources in the Connected documents explicitly identify t...