4550 matches found
CVE-2025-30803 WordPress Just Writing Statistics plugin <= 5.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in Greg Ross Just Writing Statistics just-writing-statistics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Just Writing Statistics: from n/a through = 5.3...
CVE-2025-30803
CVE-2025-30803 (Just Writing Statistics) is a Missing Authorization vulnerability in the Just Writing Statistics WordPress plugin (versions
CVE-2025-30777
CVE-2025-30777 affects PalsCode’s Support Genix (WordPress) and stems from an Authorization bypass via an insecure Direct Object Reference (user-controlled key). Attackers could potentially access restricted resources due to insecure access controls. The Wordfence vulnerability details indicate t...
CVE-2025-30777 WordPress Support Genix plugin <= 1.4.11 - Insecure Direct Object References (IDOR) Vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in DevItems Support Genix support-genix-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Support Genix: from n/a through = 1.4.11...
CVE-2025-30767
CVE-2025-30767 affects PDF for WPForms (WordPress) via Missing Authorization, enabling Arbitrary Shortcode Execution in PDF for WPForms plugins
CVE-2025-30543
Missing Authorization vulnerability in swayam.tejwani Menu Duplicator copy-menu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Menu Duplicator: from n/a through = 1.0...
CVE-2025-30592
Missing Authorization vulnerability in WesternDeal Advanced Dewplayer advanced-dewplayer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Dewplayer: from n/a through = 1.6...
CVE-2025-30591
Missing Authorization vulnerability in tuyennv Music Press Pro music-press-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Music Press Pro: from n/a through = 1.4.6...
CVE-2025-30581
Missing Authorization vulnerability in PluginOps Top Bar ultimate-bar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Top Bar: from n/a through = 3.3...
CVE-2025-30543
Missing Authorization vulnerability in swayam.tejwani Menu Duplicator copy-menu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Menu Duplicator: from n/a through = 1.0...
CVE-2025-30605
CVE-2025-30605 concerns sourceplay-navermap (affected: 0.0.2 and earlier). The Connected Wordfence entry notes Missing Authorization for sourceplay-navermap, with CVSS metrics indicating network access, low attack complexity, required privileges (Low), no user interaction, and a low integrity imp...
CVE-2025-30592 WordPress Advanced Dewplayer - plugin <= 1.6 Broken Access Control Vulnerability
Missing Authorization vulnerability in WesternDeal Advanced Dewplayer advanced-dewplayer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Dewplayer: from n/a through = 1.6...
CVE-2025-30591 WordPress Music Press Pro plugin <= 1.4.6 Broken Access Control Vulnerability
Missing Authorization vulnerability in tuyennv Music Press Pro music-press-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Music Press Pro: from n/a through = 1.4.6...
CVE-2025-30591
CVE-2025-30591 — Missing Authorization in Music Press Pro (WordPress plugin) allows exploitation due to misconfigured access control. Affected: Music Press Pro versions 1.4.6 and earlier (from n/a to 1.4.6). According to provided metrics, the CVSSv3.1 base score is 5.3 (Medium): Attack Vector NET...
CVE-2025-30581
CVE-2025-30581 describes a Missing Authorization vulnerability in the WordPress plugin Top Bar (Top Bar by PluginOps), affecting versions up to and including 3.3. The issue is tied to incorrectly configured access control security levels, enabling unauthorized actions per the description. The CVE...
CVE-2025-30543 WordPress Menu Duplicator plugin <= 1.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in swayam.tejwani Menu Duplicator copy-menu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Menu Duplicator: from n/a through = 1.0...
CVE-2025-30543
CVE-2025-30543 affects the Menu Duplicator WordPress plugin (WordPress plugin: Menu Duplicator) with version up to 1.0, introducing a Missing Authorization vulnerability due to incorrectly configured access control. The issue, described as an Unauthorized/ Missing Authorization risk, could allow ...
CVE-2025-30543 WordPress Menu Duplicator plugin <= 1.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in swayam.tejwani Menu Duplicator allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Menu Duplicator: from n/a through 1.0...
CVE-2025-28874
Authorization Bypass Through User-Controlled Key vulnerability in shanebp BP Email Assign Templates bp-email-assign-templates allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BP Email Assign Templates: from n/a through = 1.7...