CVE-2025-47472

Missing Authorization vulnerability in codepeople Music Player for WooCommerce music-player-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Music Player for WooCommerce: from n/a through = 1.5.1...

CVE-2025-47628

Missing Authorization vulnerability in quomodosoft QS Dark Mode qs-dark-mode allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects QS Dark Mode: from n/a through = 3.0...

CVE-2025-47692

Missing Authorization vulnerability in contentstudio Contentstudio contentstudio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contentstudio: from n/a through = 1.3.5...

CVE-2025-47528

Missing Authorization vulnerability in pewilliams Ovation Elements ovation-elements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ovation Elements: from n/a through = 1.1.2...

CVE-2025-47485

Missing Authorization vulnerability in CozyThemes Cozy Blocks cozy-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cozy Blocks: from n/a through = 2.1.22...

CVE-2025-47472

Missing Authorization vulnerability in codepeople Music Player for WooCommerce music-player-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Music Player for WooCommerce: from n/a through = 1.5.1...

CVE-2025-47450

Missing Authorization vulnerability in Mitchell Bennis Simple File List simple-file-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple File List: from n/a through = 6.1.13...

CVE-2025-47692 WordPress ContentStudio plugin <= 1.3.5 - Broken Access Control Vulnerability

Missing Authorization vulnerability in contentstudio Contentstudio contentstudio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contentstudio: from n/a through = 1.3.5...

CVE-2025-47628

CVE-2025-47628 relates to the WordPress plugin QS Dark Mode (versions ≤ 3.0). The available documents describe a Missing Authorization/Broken Access Control vulnerability, allowing exploitation of improperly configured access control levels. No concrete exploit details, affected product/version r...

CVE-2025-47602 WordPress Calculate Prices based on Distance For WooCommerce plugin <= 1.3.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in ammarahmad786 Calculate Prices based on Distance For WooCommerce calculate-prices-based-on-distance-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Calculate Prices based on Distance For WooCommerce:...

CVE-2025-47591

CVE-2025-47591 affects the WordPress plugin CreedAlly Bulk Featured Image (Bulk Featured Image). It is a Missing Authorization vulnerability allowing access control misconfigurations, impacting versions up to 1.2.1 (some sources list vulnerability through 1.2.4). The CVSSv3.1 base score is 4.3 (N...

CVE-2025-47591 WordPress Bulk Featured Image plugin <= 1.2.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in CreedAlly Bulk Featured Image bulk-featured-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk Featured Image: from n/a through = 1.2.4...

CVE-2025-47526

CVE-2025-47526 concerns the WordPress plugin GS Variation Swatches for WooCommerce (versions up to 3.0.4). The issue is described as a Missing Authorization vulnerability, arising from incorrectly configured access control, which could allow an attacker to exploit insufficient authorization check...

CVE-2025-47485

CVE-2025-47485 affects Cozy Blocks (Cozy Blocks – Page Builder for Gutenberg & Site Editor) up to version 2.1.22. The root cause is Missing Authorization / broken access control allowing exploitation of incorrectly configured access levels. If exploited, this could enable unauthorized access to r...

CVE-2025-47469 WordPress Media Hygiene <= 4.0.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in slui Media Hygiene allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Hygiene: from n/a through 4.0.0...

CVE-2025-47469

CVE-2025-47469 describes a Missing Authorization / Broken Access Control vulnerability in the WordPress Media Hygiene plugin (versions

CVE-2025-47467 WordPress GS Testimonial Slider plugin <= 3.3.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in GS Plugins GS Testimonial Slider gs-testimonial allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GS Testimonial Slider: from n/a through = 3.3.0...

CVE-2025-47465

CVE-2025-47465 concerns the Blocksy WordPress theme (Creative Themes). A Missing Authorization vulnerability exists in Blocksy versions up to and including 2.0.97, allowing exploitation of incorrectly configured access control. Reported CVSS 3.1/3.1 metrics indicate a medium base score (4.9) with...

CVE-2025-47485: Missing Authorization

Missing Authorization vulnerability in CozyThemes Cozy Blocks cozy-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cozy Blocks: from n/a through = 2.1.22...

CVE-2025-47471: Missing Authorization

Missing Authorization vulnerability in EnvoThemes Envo Extra envo-extra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Envo Extra: from n/a through = 1.9.9...