CVE-2025-66140 WordPress Uper for Elementor plugin <= 1.0.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in merkulove Uper for Elementor uper-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uper for Elementor: from n/a through = 1.0.5...

CVE-2025-66142

Missing Authorization vulnerability in merkulove Comparimager for Elementor comparimager-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Comparimager for Elementor: from n/a through = 1.0.1...

CVE-2025-63018

Missing Authorization vulnerability in wproyal Bard bard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bard: from n/a through = 2.229...

CVE-2025-62106

Missing Authorization vulnerability in Mario Peshev WP-CRM System wp-crm-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-CRM System: from n/a through = 3.4.5...

CVE-2025-5805

Missing Authorization vulnerability in Ninetheme Electron electron allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Electron: from n/a through = 1.8.2...

CVE-2025-49375

Missing Authorization vulnerability in cozythemes HomeLancer homelancer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HomeLancer: from n/a through = 1.0.1...

PT-2026-4022

Name of the Vulnerable Software and Affected Versions Tickera versions through 3.5.6.2 Description A missing authorization issue exists in Tickera tickera-event-ticketing-system, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Tickera to a...

PT-2026-4249

Missing Authorization vulnerability in wpeverest User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through = 4.4.9...

PT-2026-4048

Name of the Vulnerable Software and Affected Versions renatoatshown Shown Connector versions through 1.2.10 Description An authorization issue exists in renatoatshown Shown Connector shown-connector. The issue involves incorrectly configured access control security levels, potentially allowing...

PT-2026-4177

Missing Authorization vulnerability in e-plugins Institutions Directory institutions-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Institutions Directory: from n/a through = 1.3.4...

PT-2026-4008

Name of the Vulnerable Software and Affected Versions Audier For Elementor versions through 1.0.9 Description An issue exists in Audier For Elementor related to incorrectly configured access control security levels, allowing for missing authorization. The issue allows exploitation of these securi...

WordPress plugin Holmes security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

PT-2026-4068

Name of the Vulnerable Software and Affected Versions Chris Simmons WP BackItUp versions through 2.0.0 Description The software contains a missing authorization issue related to incorrectly configured access control security levels. This allows for exploitation of the system. Recommendations Upda...

PT-2026-4184

Missing Authorization vulnerability in e-plugins Real Estate Pro real-estate-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Real Estate Pro: from n/a through = 2.1.5...

PT-2026-4045

Name of the Vulnerable Software and Affected Versions e-plugins Lawyer Directory versions through 1.3.3 Description An authorization issue exists in e-plugins Lawyer Directory, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update e-plugins...

PT-2026-4182

Missing Authorization vulnerability in e-plugins Listihub listihub allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Listihub: from n/a through = 1.0.6...

PT-2026-4099

Name of the Vulnerable Software and Affected Versions WDV One Page Docs versions through 1.2.4 Description An authorization issue exists in vrpr WDV One Page Docs, specifically related to incorrectly configured access control security levels. This allows for unauthorized access. Recommendations...

PT-2026-4004

Name of the Vulnerable Software and Affected Versions merkulove Imager for Elementor versions through 2.0.4 Description An authorization issue exists in merkulove Imager for Elementor imager-elementor, allowing exploitation of incorrectly configured access control security levels. The issue relat...

PT-2026-4215

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Cocco cocco allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cocco: from n/a through = 1.5.1...

PT-2026-3999

Name of the Vulnerable Software and Affected Versions wproyal Bard versions n/a through 2.229 Description An authorization issue exists in wproyal Bard, allowing exploitation of incorrectly configured access control security levels. Recommendations Update wproyal Bard to a version greater than...