CVE-2025-32244 WordPress SEO Help plugin <= 6.7.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in QuantumCloud SEO Help seo-help allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SEO Help: from n/a through = 6.7.9...

CVE-2025-32244 WordPress SEO Help plugin <= 6.7.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in QuantumCloud SEO Help seo-help allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SEO Help: from n/a through = 6.7.9...

CVE-2025-32240 WordPress Site Notify plugin <= 1.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in wpvsingh Site Notify site-notify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Notify: from n/a through = 1.0...

CVE-2025-32240

CVE-2025-32240: The connected Wordfence entry for Site Notify notes a Missing Authorization issue in Site Notify (

CVE-2025-32213 WordPress Flo Forms plugin <= 1.0.43 - Broken Access Control vulnerability

Missing Authorization vulnerability in flothemesplugins Flo Forms flo-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flo Forms: from n/a through = 1.0.43...

CVE-2025-32221

CVE-2025-32221 : Affected software is the WordPress plugin EazyDocs by Spider Themes, version

CVE-2025-32216

CVE-2025-32216 : Spider Elements – Crafted UX First Addons for Elementor (Spider Elements – Addons for Elementor) versions up to 1.6.2 suffer a Missing Authorization flaw, enabling exploit of incorrectly configured access control to access restricted functions. The Wordfence vulnerability record ...

CVE-2025-32213

CVE-2025-32213 (Flo Forms – Flo Forms plugin for WordPress) is a Missing Authorization vulnerability in Flo Forms

CVE-2025-32210

CVE-2025-32210 concerns the WordPress plugin "CM Registration and Invitation Codes" by CreativeMindsSolutions. The vulnerability is a Missing Authorization / Broken Access Control allowing exploitation due to incorrectly configured access control levels in CM Registration and Invitation Codes (ve...

CVE-2025-32212

CVE-2025-32212: Missing Authorization in Specia Companion (Specia Theme Specia Companion) enables access-control bypass due to misconfigured privileges. Affected: Specia Companion up to at least 4.6 (initial). Connected data corroborates Missing Authorization for Specia Companion with patch statu...

CVE-2025-32208 WordPress Hive Support plugin <= 1.2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Hive Support Hive Support allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Hive Support: from n/a through 1.2.2...

CVE-2025-32208

CVE-2025-32208 (Hive Support WordPress plugin) is supported by connected documents as a real vulnerability, not a placeholder. The Hive Support plugin (WordPress) is affected by a missing authorization/capability check in functions hs_update_ai_chat_settings() and hive_lite_support_get_all_binbox...

PT-2025-15957 · Toast Plugins · Toast Plugins Internal Link Optimiser

Name of the Vulnerable Software and Affected Versions: Toast Plugins Internal Link Optimiser versions 5.1.2 and earlier Description: The issue is related to a Missing Authorization vulnerability in Toast Plugins Internal Link Optimiser, which allows exploiting incorrectly configured access contro...

PT-2025-15946 · Flo Forms · Flo Forms

Name of the Vulnerable Software and Affected Versions: Flo Forms versions 1.0.43 and earlier Description: The issue is related to a Missing Authorization vulnerability, allowing the exploitation of incorrectly configured access control security levels. This enables unauthorized access control...

PT-2025-15942 · Unknown · Hive Support

Name of the Vulnerable Software and Affected Versions: Hive Support versions 1.2.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For Hive Support versions...

CVE-2025-26901

Missing Authorization vulnerability in Brizy Brizy Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brizy Pro: from n/a through 2.6.1...

CVE-2025-26901

CVE-2025-26901 (Brizy Pro) is a Missing Authorization vulnerability affecting Brizy Pro versions up to 2.6.1, per Wordfence coverage referencing the Brizy Pro entry. The issue stems from incorrectly configured access control security levels, enabling unauthorized actions without authentication or...

CVE-2025-3474 Panels - Critical - Access bypass - SA-CONTRIB-2025-033

Missing Authentication for Critical Function vulnerability in Drupal Panels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Panels: from 0.0.0 before 4.9.0...

CVE-2025-31377

Missing Authorization vulnerability in Asaquzzaman mishu Woo Product Feed For Marketing Channels woocommerce-to-google-merchant-center allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Woo Product Feed For Marketing Channels: from n/a through = 1.9.0...

CVE-2025-31004

CVE-2025-31004 is a missing authorization vulnerability in the Rich Table of Contents WordPress plugin. Public details show affected software: Rich Table of Contents (WordPress plugin) up to version 1.4.0. The issue is categorized as Missing Authorization with an attack surface that is network-ba...