Lucene search
+L

5349 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/14 12:00 a.m.•3 views

CVE-2025-23766: Missing Authorization

Missing Authorization vulnerability in ashamil OPSI Israel Domestic Shipments woo-ups-pickup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OPSI Israel Domestic Shipments: from n/a through = 2.8.2...

6.5CVSS5.9AI score0.00404EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/09 10:21 a.m.•16 views

CVE-2025-25110

Missing Authorization vulnerability in Metagauss Event Kikfyre kikfyre-events-calendar-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Kikfyre: from n/a through = 2.1.8...

5.4CVSS7.2AI score0.00357EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/07 6:03 p.m.•12 views

CVE-2025-22677

Missing Authorization vulnerability in UIUX Lab Uix Shortcodes uix-shortcodes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uix Shortcodes: from n/a through = 2.0.3...

4.8CVSS7.2AI score0.00295EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/07 6:01 p.m.•14 views

CVE-2025-22643

Missing Authorization vulnerability in famethemes OnePress onepress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OnePress: from n/a through = 2.3.11...

4.3CVSS7.2AI score0.00265EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/07 10:15 a.m.•27 views

CVE-2025-25120

Missing Authorization vulnerability in Melodic Media Slide Banners slide-banners allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Slide Banners: from n/a through = 1.3...

4.3CVSS0.00316EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/07 10:15 a.m.•10 views

CVE-2025-25081

Missing Authorization vulnerability in DeannaS Embed RSS embed-rss allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Embed RSS: from n/a through = 3.1...

4.2CVSS0.0022EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/07 10:12 a.m.•68 views

CVE-2025-25167

CVE-2025-25167 is a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin BookPress – For Book Authors (version range: affected up to 1.2.7). The CVE description states that an attacker can exploit incorrectly configured access control security levels to bypass autho...

9.8CVSS7.2AI score0.00467EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/02/07 10:11 a.m.•17 views

CVE-2025-25120 WordPress Slide Banners plugin <= 1.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Melodic Media Slide Banners allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Slide Banners: from n/a through 1.3...

4.3CVSS4.7AI score0.00316EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/07 10:11 a.m.•78 views

CVE-2025-25120

CVE-2025-25120 describes Missing Authorization (Broken Access Control) in WordPress Slide Banners plugin

4.3CVSS7.2AI score0.00316EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/07 10:11 a.m.•40 views

CVE-2025-25110 WordPress Event Kikfyre plugin <= 2.1.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Metagauss Event Kikfyre kikfyre-events-calendar-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Kikfyre: from n/a through = 2.1.8...

5.4CVSS0.00357EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/07 10:11 a.m.•65 views

CVE-2025-25081

CVE-2025-25081 › WordPress Embed RSS plugin

4.2CVSS7.2AI score0.0022EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 9:02 p.m.•16 views

CVE-2022-46838

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1...

9.1CVSS5.2AI score0.00732EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 8:35 a.m.•15 views

CVE-2024-47314

Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through = 3.2.8...

8.8CVSS5.9AI score0.00393EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 6:31 a.m.•11 views

CVE-2024-5619

Authorization Bypass Through User-Controlled Key vulnerability in PruvaSoft Informatics Apinizer Management Console allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Apinizer Management Console: before 2024.05.1...

9.6CVSS5.8AI score0.00366EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 6:08 a.m.•20 views

CVE-2024-49657

Missing Authorization vulnerability in Renata Bracichowicz 3D Work In Progress renee-work-in-progress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 3D Work In Progress: from n/a through = 1.0.3...

7.7CVSS5.9AI score0.00403EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 12:47 a.m.•12 views

CVE-2024-37232

Missing Authorization vulnerability in Hercules Design Hercules Core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hercules Core: from n/a through 6.5...

8.8CVSS6.9AI score0.00443EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/04 2:21 p.m.•13 views

CVE-2025-22730 WordPress Ksher plugin <= 1.1.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ksher Ksher allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Ksher: from n/a through 1.1.2...

6.5CVSS7.1AI score0.00334EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/04 12:00 a.m.•3 views

CVE-2025-22643: Missing Authorization

Missing Authorization vulnerability in famethemes OnePress onepress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OnePress: from n/a through = 2.3.11...

4.3CVSS5.9AI score0.00265EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/03 3:15 p.m.•12 views

CVE-2025-24642

Missing Authorization vulnerability in theme funda Setup Default Featured Image setup-default-feature-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Setup Default Featured Image: from n/a through = 1.2...

6.5CVSS0.00413EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/03 2:23 p.m.•63 views

CVE-2025-22681

CVE-2025-22681 describes a Missing Authorization vulnerability in the WordPress Content Cloner plugin, affected versions

4.3CVSS7.2AI score0.00343EPSS
SaveExploits0References1
Rows per page
Query Builder