4550 matches found
CVE-2025-53284
Missing Authorization vulnerability in pankaj.sakaria CMS Blocks cms-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CMS Blocks: from n/a through = 1.1...
CVE-2025-53288
Missing Authorization vulnerability in Adrian Ladó PlatiOnline Payments plationline allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PlatiOnline Payments: from n/a through = 7.0.0...
CVE-2025-53293
Missing Authorization vulnerability in Morten Dalgaard Johansen Dashboard Widget Sidebar dashboard-widget-sidebar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dashboard Widget Sidebar: from n/a through = 1.2.3...
CVE-2025-53288
Missing Authorization vulnerability in Adrian Ladó PlatiOnline Payments plationline allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PlatiOnline Payments: from n/a through = 7.0.0...
CVE-2025-53266
Missing Authorization vulnerability in EdwardBock Cron Logger cron-logger allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cron Logger: from n/a through = 1.3.0...
CVE-2025-53200
Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ChatBot: from n/a through = 6.7.3...
CVE-2025-53323 WordPress Pre-Publish Post Checklist plugin <= 3.1 - Broken Access Control Vulnerability
Missing Authorization vulnerability in danbriapps Pre-Publish Post Checklist pre-publish-post-checklist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pre-Publish Post Checklist: from n/a through = 3.1...
CVE-2025-53323
CVE-2025-53323: WordPress Pre-Publish Post Checklist
CVE-2025-53318
CVE-2025-53318 (WP DB Booster) : A Missing Authorization vulnerability in the WordPress plugin WP DB Booster (affected versions: from n/a through 1.0.1) allows exploitation of incorrectly configured access control security levels. Connected sources consistently identify it as a missing/weak autho...
CVE-2025-53284
CVE-2025-53284 : Missing Authorization vulnerability in the WordPress plugin CMS Blocks (versions n/a–1.1) due to incorrectly configured access control. This may allow an attacker with low privileges to access restricted resources over the network, with high impact on confidentiality but no state...
CVE-2025-53266 WordPress Cron Logger plugin <= 1.3.0 - Broken Access Control Vulnerability
Missing Authorization vulnerability in EdwardBock Cron Logger cron-logger allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cron Logger: from n/a through = 1.3.0...
CVE-2025-53266
CVE-2025-53266: WordPress Cron Logger plugin
CVE-2025-53255 WordPress HurryTimer plugin <= 2.13.1 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Nabil Lemsieh HurryTimer allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects HurryTimer: from n/a through 2.13.1...
CVE-2025-53200 WordPress ChatBot plugin <= 6.7.3 - Broken Access Control Vulnerability
Missing Authorization vulnerability in QuantumCloud ChatBot allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ChatBot: from n/a through 6.7.3...
CVE-2025-53200
CVE-2025-53200 concerns WordPress ChatBot plugin (WPBot)
CVE-2025-53200 WordPress ChatBot plugin <= 6.7.3 - Broken Access Control Vulnerability
Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ChatBot: from n/a through = 6.7.3...
CVE-2025-52817
Missing Authorization vulnerability in ZealousWeb Abandoned Contact Form 7 abandoned-contact-form-7 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Abandoned Contact Form 7: from n/a through = 2.2...
CVE-2025-52818 WordPress Trusty Whistleblowing plugin <= 1.5.2 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Dejan Jasnic Trusty Whistleblowing allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Trusty Whistleblowing: from n/a through 1.5.2...
CVE-2025-52818
CVE-2025-52818 is a Missing Authorization vulnerability in the WordPress plugin Trusty Whistleblowing . The initial entry indicates impact on versions from unknown (n/a) up to 1.5.2 , with a CVSS v3.1 base score of 8.2 (High) , vulnerability class “Missing Authorization,” and a network attack vec...
PT-2025-27190 · Unknown · Cms Blocks
Name of the Vulnerable Software and Affected Versions: pankaj.sakaria CMS Blocks versions n/a through 1.1 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions n/a...