PT-2025-54435

Name of the Vulnerable Software and Affected Versions merkulove Headinger for Elementor versions through 1.1.4 Description A missing authorization flaw exists in merkulove Headinger for Elementor, allowing exploitation due to incorrectly configured access control security levels. Recommendations...

PT-2025-54346

Name of the Vulnerable Software and Affected Versions 101gen Wawp versions through 4.0.5 Description A missing authorization issue exists in 101gen Wawp, allowing exploitation due to incorrectly configured access control security levels. Recommendations Versions prior to 4.0.5 are affected. At th...

PT-2025-54342

Name of the Vulnerable Software and Affected Versions Reuters Direct versions through 3.0.0 Description A missing authorization issue exists in Reuters Direct, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Reuters Direct to a version later...

PT-2025-54364

Name of the Vulnerable Software and Affected Versions Solwininfotech Trash Duplicate and 301 Redirect versions through 1.9.1 Description A missing authorization flaw exists in Solwininfotech Trash Duplicate and 301 Redirect, allowing exploitation of incorrectly configured access control security...

PT-2025-54355

Name of the Vulnerable Software and Affected Versions MyD Delivery versions through 1.3.7 Description An authorization bypass exists in Eduardo Villão MyD Delivery due to incorrectly configured access control security levels. This allows exploitation through a user-controlled key. Recommendations...

PT-2025-54405

Missing Authorization vulnerability in merkulove Questionar for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Questionar for Elementor: from n/a through 1.1.7...

PT-2025-54361

Name of the Vulnerable Software and Affected Versions Wiremo versions through 1.4.99 Description A missing authorization issue exists in Wiremo, allowing exploitation of incorrectly configured access control security levels. This enables unauthorized access control bypass. Recommendations At the...

WordPress plugin History Timeline 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

PT-2025-54366

Name of the Vulnerable Software and Affected Versions RestroPress versions through 3.2.4.2 Description An authorization issue exists in Magnigenie RestroPress due to incorrectly configured access control security levels. This allows unauthorized access. Recommendations Update RestroPress to a...

CVE-2025-66080 WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.0.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cookie Notice for GDPR, CCPA & ePrivacy Consent: from n/a through 4.0.3...

EUVD-2025-205722

Missing Authorization vulnerability in Weblizar - WordPress Themes & Plugin HR Management Lite hr-management-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HR Management Lite: from n/a through = 3.5...

EUVD-2025-205720

Missing Authorization vulnerability in bizswoop BizPrint print-google-cloud-print-gcp-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BizPrint: from n/a through = 4.6.7...

EUVD-2025-205714

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Backpack Traveler backpacktraveler allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Backpack Traveler: from n/a through = 2.10.3...

EUVD-2025-205732

Missing Authorization vulnerability in Stephen Harris Event Organiser event-organiser allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Organiser: from n/a through = 3.12.8...

EUVD-2025-205760

Authorization Bypass Through User-Controlled Key vulnerability in Eagle-Themes Eagle Booking eagle-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Eagle Booking: from n/a through = 1.3.4.3...

CVE-2025-69093

Missing Authorization vulnerability in wpdesk ShopMagic shopmagic-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShopMagic: from n/a through = 4.7.2...

CVE-2025-69028

Missing Authorization vulnerability in BoldGrid weForms weforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects weForms: from n/a through = 1.6.25...

CVE-2025-69029

Authorization Bypass Through User-Controlled Key vulnerability in Select-Themes Struktur struktur allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Struktur: from n/a through = 2.5.1...

CVE-2025-68997

Authorization Bypass Through User-Controlled Key vulnerability in AdvancedCoding wpDiscuz wpdiscuz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpDiscuz: from n/a through = 7.6.43...

CVE-2025-68981

Missing Authorization vulnerability in designthemes HomeFix Elementor Portfolio homefix-ele-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HomeFix Elementor Portfolio: from n/a through = 1.0.1...