CVE-2025-68058

Missing Authorization vulnerability in e-plugins Institutions Directory institutions-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Institutions Directory: from n/a through = 1.3..4...

CVE-2025-5805

Missing Authorization vulnerability in Ninetheme Electron electron allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Electron: from n/a through = 1.8.2...

CVE-2026-24371 WordPress BA Book Everything plugin <= 1.8.16 - Broken Access Control vulnerability

Missing Authorization vulnerability in bookingalgorithms BA Book Everything ba-book-everything allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BA Book Everything: from n/a through = 1.8.16...

CVE-2026-24356

CVE-2026-24356 corresponds to a Missing Authorization (Broken Access Control) vulnerability in GetGenie (WordPress plugin). Public data indicates Roxnor GetGenie GetGenie is affected from n/a through 4.3.0, with the root cause described as incorrectly configured access control security levels. Ac...

CVE-2026-22450

CVE-2026-22450 is documented as a Missing Authorization / broken access control vulnerability in the WordPress theme Don Peppe (Select-Themes) Don Peppe, affected up to version 1.3. Public records from NVD, Red Hat, CIRCL, EUVD/ENISA, and CVE lists confirm the vulnerability description and affect...

CVE-2025-67917

CVE-2025-67917 describes a Missing Authorization vulnerability in Travel Traveler (Travel Booking WordPress Theme), affecting Travel Traveler up to version 3.2.6. The root cause is incorrectly configured access control that could allow unauthorized access to certain resources. Wordfence documenta...

CVE-2025-62141

CVE-2025-62141: In the Wawp plugin for WooCommerce, there is a missing authorization flaw affecting Wawp versions up to 4.4 (the advisory notes Wawp &lt;= 4.4). Patch status in the Wordfence report shows the issue has been fixed, and remediation is to upgrade to the patched release (≥ 4.4). The i...

CVE-2025-62098 WordPress Portfolio Gallery plugin <= 1.4.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in totalsoft Portfolio Gallery gallery-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Portfolio Gallery: from n/a through = 1.4.8...

CVE-2025-62888 WordPress WP Attachments plugin <= 5.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Marco Milesi WP Attachments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Attachments: from n/a through 5.2...

CVE-2025-68603

Missing Authorization vulnerability in Marketing Fire Editorial Calendar editorial-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Editorial Calendar: from n/a through = 3.8.8...

CVE-2025-68578

CVE-2025-68578 is a Missing Authorization vulnerability in Addonify – Quick View For WooCommerce (Addonify plugin) affecting Addonify (

CVE-2025-68556

Missing Authorization vulnerability in VillaTheme HAPPY happy-helpdesk-support-ticket-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HAPPY: from n/a through = 1.0.9...

CVE-2025-68505 WordPress H5P plugin <= 1.16.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in icc0rz H5P h5p allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects H5P: from n/a through = 1.16.1...

PT-2025-53257

Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time Slots Booking Form: from n/a through = 1.2.38...

CVE-2025-49041

Missing Authorization vulnerability in The African Boss Get Cash get-cash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Get Cash: from n/a through = 3.2.3...

CVE-2025-64243

Missing Authorization vulnerability in e-plugins Directory Pro directory-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directory Pro: from n/a through = 2.5.6...

CVE-2025-66129

CVE-2025-66129 refers to a WordPress plugin issue in the Pochipp plugin (&lt;= 1.18.0) described as a Missing Authorization / Broken Access Control vulnerability. The underlying problem is an improperly configured access control security level that could enable unauthorized actions. Public source...

CVE-2025-64247

CVE-2025-64247 describes a Missing Authorization vulnerability in the WordPress plugin Read More & Accordion (Expand-maker). The Initial description states impact via unauthorized access due to misconfigured access controls, affecting Read More & Accordion: from n/a through

CVE-2022-47425

Missing Authorization vulnerability in Repute Infosystems ARMember allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ARMember: from n/a through 3.4.10...

CVE-2025-63025

Missing Authorization vulnerability in Xagio SEO Xagio SEO xagio-seo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Xagio SEO: from n/a through = 7.1.0.37...