CVE-2025-30824

CVE-2025-30824 : Textmetrics (Israpil Textmetrics) has a Missing Authorization flaw affecting versions up to 3.6.1, due to incorrectly configured access control levels. The vulnerability is documented with a moderate impact (base score 5.4, CVSS 3.1) and indicates that an attacker may bypass auth...

CVE-2025-30824 WordPress Textmetrics plugin <= 3.6.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Israpil Textmetrics webtexttool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Textmetrics: from n/a through = 3.6.1...

CVE-2025-30817

CVE-2025-30817 documents a Missing Authorization vulnerability in the WordPress plugin Z Companion (wpzita). Affected versions are listed as from n/a through 1.0.13. Root cause is described as an Incorrectly Configured Access Control Security Levels, enabling unauthorized access due to Missing Au...

CVE-2025-30817 WordPress Z Companion plugin <= 1.0.13 - Broken Access Control vulnerability

Missing Authorization vulnerability in wpzita Z Companion z-companion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Z Companion: from n/a through = 1.0.13...

CVE-2025-30809

CVE-2025-30809 refers to a Missing Authorization vulnerability in the Live Forms plugin for WordPress (Live Forms: 4.8.4 and earlier). The issue enables an authenticated user at Subscriber+ level to perform Settings updates they should not be allowed to, indicating a broken access control for con...

CVE-2025-30803 WordPress Just Writing Statistics plugin <= 5.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Greg Ross Just Writing Statistics just-writing-statistics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Just Writing Statistics: from n/a through = 5.3...

CVE-2025-30803

CVE-2025-30803 (Just Writing Statistics) is a Missing Authorization vulnerability in the Just Writing Statistics WordPress plugin (versions

CVE-2025-30777

CVE-2025-30777 affects PalsCode’s Support Genix (WordPress) and stems from an Authorization bypass via an insecure Direct Object Reference (user-controlled key). Attackers could potentially access restricted resources due to insecure access controls. The Wordfence vulnerability details indicate t...

CVE-2025-30777 WordPress Support Genix plugin <= 1.4.11 - Insecure Direct Object References (IDOR) Vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in DevItems Support Genix support-genix-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Support Genix: from n/a through = 1.4.11...

CVE-2025-30767

CVE-2025-30767 affects PDF for WPForms (WordPress) via Missing Authorization, enabling Arbitrary Shortcode Execution in PDF for WPForms plugins

CVE-2025-30874: Missing Authorization

Missing Authorization vulnerability in Jose Mortellaro Specific Content For Mobile specific-content-for-mobile allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Specific Content For Mobile: from n/a through = 0.5.3...

CVE-2025-30881: Missing Authorization

Missing Authorization vulnerability in themehunk Big Store big-store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Big Store: from n/a through = 2.0.8...

CVE-2025-30767: Missing Authorization

Missing Authorization vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PDF for WPForms: from n/a through = 5.3.0...

CVE-2025-30828: Missing Authorization

Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Timetics: from n/a through = 1.0.29...

CVE-2025-30777: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in DevItems Support Genix support-genix-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Support Genix: from n/a through = 1.4.11...

CVE-2025-30894: Missing Authorization

Missing Authorization vulnerability in Epsiloncool WP Fast Total Search fulltext-search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Fast Total Search: from n/a through = 1.79.262...

CVE-2025-22770: Missing Authorization

Missing Authorization vulnerability in EnvoThemes Envo Multipurpose allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Envo Multipurpose: from n/a through 1.1.6...

CVE-2025-22671: Missing Authorization

Missing Authorization vulnerability in Leap13 Disable Elementor Editor Translation disable-elementor-editor-translation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Disable Elementor Editor Translation: from n/a through = 1.0.2...

CVE-2025-30861: Missing Authorization

Missing Authorization vulnerability in Rustaurius Five Star Restaurant Reservations restaurant-reservations allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Five Star Restaurant Reservations: from n/a through = 2.6.29...

CVE-2025-30887: Missing Authorization

Missing Authorization vulnerability in magepeopleteam WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEvently: from n/a through = 4.2.9...