Lucene search
+L

4951 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/16 12:00 a.m.•0 views

CVE-2025-64630: Missing Authorization

Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business Directory: from n/a through = 6.4.19...

4.9CVSS5.9AI score0.00341EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/16 12:00 a.m.•0 views

CVE-2025-64251: Missing Authorization

Missing Authorization vulnerability in azzaroco Ultimate Learning Pro indeed-learning-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Learning Pro: from n/a through = 3.9.3...

4.9CVSS5.9AI score0.00279EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/16 12:00 a.m.•0 views

CVE-2025-64243: Missing Authorization

Missing Authorization vulnerability in e-plugins Directory Pro directory-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directory Pro: from n/a through = 2.5.6...

4.3CVSS5.9AI score0.0022EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/16 12:00 a.m.•0 views

CVE-2025-64632: Missing Authorization

Missing Authorization vulnerability in Auctollo Google XML Sitemaps google-sitemap-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Google XML Sitemaps: from n/a through = 4.1.22...

5.3CVSS5.9AI score0.00254EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/16 12:00 a.m.•0 views

CVE-2025-66165: Missing Authorization

Missing Authorization vulnerability in merkulove Lottier for WPBakery lottier-wpbakery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lottier for WPBakery: from n/a through = 1.1.7...

5.4CVSS5.9AI score0.00199EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/16 12:00 a.m.•0 views

CVE-2025-68087: Missing Authorization

Missing Authorization vulnerability in merkulove Modalier for Elementor modalier-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Modalier for Elementor: from n/a through = 1.0.6...

5.4CVSS5.9AI score0.00164EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/16 12:00 a.m.•13 views

PT-2025-51396

Name of the Vulnerable Software and Affected Versions emarket-design versions through 2.5.3 Description An authorization issue exists in the Request a Quote functionality of emarket-design. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized...

4.3CVSS6.5AI score0.0022EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/12/16 12:00 a.m.•18 views

PT-2025-51397

Name of the Vulnerable Software and Affected Versions Protect WP Admin versions through 4.1 Description An authorization issue exists in Protect WP Admin, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Protect WP Admin to a version newer tha...

6.6AI score0.0033EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/12/16 12:00 a.m.•11 views

PT-2025-51430

Name of the Vulnerable Software and Affected Versions merkulove Lottier versions through 1.1.1 Description An authorization issue exists in merkulove Lottier lottier-gutenberg, allowing exploitation of incorrectly configured access control security levels. Recommendations Update to a version late...

5.4CVSS6.6AI score0.00199EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/12/10 5:17 p.m.•10 views

CVE-2022-47425

Missing Authorization vulnerability in Repute Infosystems ARMember allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ARMember: from n/a through 3.4.10...

4.3CVSS7AI score0.00292EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/10 3:13 p.m.•12 views

CVE-2025-63065

Authorization Bypass Through User-Controlled Key vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Media LIbrary Assistant: from n/a through = 3.29...

5.3CVSS5.9AI score0.00348EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/10 3:13 p.m.•11 views

CVE-2025-63025

Missing Authorization vulnerability in Xagio SEO Xagio SEO xagio-seo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Xagio SEO: from n/a through = 7.1.0.37...

4.3CVSS5.7AI score0.0022EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/10 3:13 p.m.•12 views

CVE-2025-63008

Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP ERP: from n/a through = 1.16.7...

5.3CVSS7AI score0.00301EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/10 3:13 p.m.•13 views

CVE-2025-62740

Missing Authorization vulnerability in Mario Peshev WP-CRM System wp-crm-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-CRM System: from n/a through = 3.4.6...

5.3CVSS5.9AI score0.00254EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/10 2:23 p.m.•10 views

CVE-2025-67566

Missing Authorization vulnerability in WofficeIO Woffice Core woffice-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Woffice Core: from n/a through = 5.4.30...

5.3CVSS7AI score0.0032EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/10 2:22 p.m.•10 views

CVE-2025-64257

Missing Authorization vulnerability in Joe Dolson My Tickets my-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Tickets: from n/a through = 2.1.0...

4.3CVSS7AI score0.00234EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/09 6:30 p.m.•18 views

EUVD-2025-201949

Missing Authorization vulnerability in QuantumCloud Simple Link Directory simple-link-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Link Directory: from n/a through = 8.8.3...

5.3CVSS6.5AI score0.0027EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/12/09 6:30 p.m.•16 views

EUVD-2025-202067

Missing Authorization vulnerability in Ronald Huereca Highlight and Share highlight-and-share allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Highlight and Share: from n/a through = 5.2.0...

5.3CVSS6.5AI score0.0044EPSS
SaveExploits2References2
EUVD
EUVD
•added 2025/12/09 6:30 p.m.•17 views

EUVD-2025-202075

Missing Authorization vulnerability in WPFunnels WPFunnels wpfunnels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPFunnels: from n/a through = 3.6.2...

6.5AI score0.00247EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/12/09 6:30 p.m.•16 views

EUVD-2025-202076

Missing Authorization vulnerability in GSheetConnector by WesternDeal WPForms Google Sheet Connector gsheetconnector-wpforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPForms Google Sheet Connector: from n/a through = 4.0.0...

6.5AI score0.00254EPSS
SaveExploits0References2
Rows per page
Query Builder