Lucene search
+L

5346 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/25 12:00 a.m.•5 views

CVE-2025-26983: Missing Authorization

Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor recipe-card-blocks-by-wpzoom allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Recipe Card Blocks for Gutenberg & Elementor: from n/a through = 3.4.3...

4.3CVSS5.9AI score0.00336EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/25 12:00 a.m.•6 views

CVE-2025-26871: Missing Authorization

Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through = 4.8.3...

8.8CVSS5.9AI score0.00406EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2025/02/25 12:00 a.m.•16 views

openSUSE Security Advisory (SUSE-SU-2024:0730-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.7AI score0.03168EPSS
SaveExploits1References9
RedhatCVE
RedhatCVE
•added 2025/02/24 4:21 p.m.•23 views

CVE-2025-26764

Missing Authorization vulnerability in enituretechnology Distance Based Shipping Calculator distance-based-shipping-calculator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Distance Based Shipping Calculator: from n/a through = 2.0.22...

6.5CVSS7.2AI score0.00328EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/24 3:15 p.m.•22 views

CVE-2025-27356

Missing Authorization vulnerability in Hardik Sticky Header On Scroll sticky-header-on-scroll allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sticky Header On Scroll: from n/a through = 1.0...

5.4CVSS0.00281EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/24 3:15 p.m.•27 views

CVE-2025-27294

Missing Authorization vulnerability in platcom WP-Asambleas wp-asambleas allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Asambleas: from n/a through = 2.85.0...

4.8CVSS0.00264EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/24 3:15 p.m.•30 views

CVE-2025-26883

Missing Authorization vulnerability in bPlugins Animated Text Block animated-text-block allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Animated Text Block: from n/a through = 1.0.7...

6.5CVSS0.0041EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/24 3:15 p.m.•13 views

CVE-2024-12917

Files or Directories Accessible to External Parties vulnerability in Agito Computer Health4All allows Exploiting Incorrectly Configured Access Control Security Levels, Authentication Abuse. This issue affects Health4All: before 10.01.2025...

8.3CVSS0.00438EPSS
SaveExploits0References2
CVE
CVE
•added 2025/02/24 2:49 p.m.•80 views

CVE-2025-27356

CVE-2025-27356 is a Missing Authorization vulnerability affecting the WordPress plugin “Sticky Header On Scroll” versions up to 1.0, per Patchstack and CVE records. The underlying issue is broken access control/incorrectly configured access levels, which could allow unauthorized access or actions...

5.4CVSS7.2AI score0.00281EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/24 2:49 p.m.•12 views

CVE-2025-26883 WordPress Animated Text Block plugin <= 1.0.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in bPlugins Animated Text Block animated-text-block allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Animated Text Block: from n/a through = 1.0.7...

6.5CVSS8.6AI score0.0041EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/24 2:49 p.m.•35 views

CVE-2025-26883 WordPress Animated Text Block plugin <= 1.0.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in bPlugins Animated Text Block animated-text-block allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Animated Text Block: from n/a through = 1.0.7...

6.5CVSS0.0041EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/24 2:48 p.m.•79 views

CVE-2025-27294

CVE-2025-27294 affects the WordPress plugin WP-Asambleas, version

4.8CVSS7.2AI score0.00264EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/24 12:00 a.m.•2 views

CVE-2025-27356: Missing Authorization

Missing Authorization vulnerability in Hardik Sticky Header On Scroll sticky-header-on-scroll allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sticky Header On Scroll: from n/a through = 1.0...

5.4CVSS5.9AI score0.00281EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/24 12:00 a.m.•5 views

CVE-2025-26883: Missing Authorization

Missing Authorization vulnerability in bPlugins Animated Text Block animated-text-block allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Animated Text Block: from n/a through = 1.0.7...

6.5CVSS5.9AI score0.0041EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/22 4:15 p.m.•15 views

CVE-2025-26750

Missing Authorization vulnerability in appsbd Vitepos vitepos-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Vitepos: from n/a through = 3.1.3...

6.5CVSS0.00343EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/22 3:52 p.m.•71 views

CVE-2025-26750

CVE-2025-26750 describes a Missing Authorization vulnerability in the WordPress Vitepos POS plugin (Vitepos-lite) for WooCommerce, affecting versions up to 3.1.3. The CVSS v3.1 base score is 6.5 (Network, Low Privileges, High Confidentiality impact; UI: none; I: none). No exploitation details are...

6.5CVSS7.2AI score0.00343EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/22 12:00 a.m.•8 views

CVE-2025-26750: Missing Authorization

Missing Authorization vulnerability in appsbd Vitepos vitepos-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Vitepos: from n/a through = 3.1.3...

6.5CVSS5.9AI score0.00343EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/19 8:15 a.m.•37 views

CVE-2024-13854

The Education Addon for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.1 via the naeduelementortemplate shortcode due to missing validation on a user controlled key. This makes it possible for authenticated attackers, wit...

4.3CVSS0.00346EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/18 12:00 a.m.•4 views

CVE-2025-27013: Missing Authorization

Missing Authorization vulnerability in QuanticaLabs MediCenter - Health Medical Clinic medicenter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MediCenter - Health Medical Clinic: from n/a through 14.7...

5.3CVSS5.9AI score0.00285EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/17 11:38 a.m.•10 views

CVE-2025-26773 WordPress Analytify plugin <= 5.5.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Adnan Analytify wp-analytify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Analytify: from n/a through = 5.5.0...

4.3CVSS8.5AI score0.00333EPSS
SaveExploits0References1
Rows per page
Query Builder