EUVD-2025-202003

Missing Authorization vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EventPrime: from n/a through = 4.2.4.1...

CVE-2025-67584 WordPress GoDAM plugin <= 1.4.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in rtCamp GoDAM godam allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GoDAM: from n/a through = 1.4.6...

CVE-2025-67560

Public technical details about CVE-2025-67560 are not provided in the given documents; no confirmed affected products, root cause, or fixes are disclosed here. Monitor for updates.

PT-2025-49945

Name of the Vulnerable Software and Affected Versions WPFunnels versions through 3.6.2 Description An authorization issue exists in WPFunnels wpfunnels, allowing exploitation of incorrectly configured access control security levels. Recommendations Update WPFunnels to a version later than 3.6.2...

PT-2025-49890

Name of the Vulnerable Software and Affected Versions ForumWP versions through 2.1.4 Description The software contains a missing authorization issue due to incorrectly configured access control security levels. Recommendations Update ForumWP to a version later than 2.1.4...

PT-2025-49874

Name of the Vulnerable Software and Affected Versions Essekia Tablesome versions through 1.1.34 Description An authorization issue exists in Essekia Tablesome, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update Essekia Tablesome to a version...

CVE-2025-66087

Missing Authorization vulnerability in Property Hive PropertyHive propertyhive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PropertyHive: from n/a through = 2.1.12...

WordPress plugin TNC Toolbox: Web Performance 安全漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

CVE-2025-62889

Missing Authorization vulnerability in KingAddons.com King Addons for Elementor king-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects King Addons for Elementor: from n/a through = 51.1.61...

CVE-2025-62964

CVE-2025-62964 refers to a Missing Authorization vulnerability in the WordPress plugin MDTF (RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter). Connected sources indicate the flaw affects MDTF versions up to 1.3.6 (and possibly earlier) and arises from broken access control/security level ...

CVE-2025-53236

Missing Authorization vulnerability in AndonDesign UDesign Core u-design-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UDesign Core: from n/a through = 4.14.0...

EUVD-2025-35492

Missing Authorization vulnerability in Wikimedia Foundation Wikipedia Preview wikipedia-preview allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wikipedia Preview: from n/a through = 1.15.0...

CVE-2025-49920

CVE-2025-49920 concerns Web Accessibility by accessiBe (WordPress plugin)

CVE-2025-49377

CVE-2025-49377 affects the WordPress Hydra Booking plugin up to version 1.1.9. The root cause is missing authorization due to incorrectly configured access control security levels (broken access control). This can permit unauthorized access as described across multiple sources (e.g., Red Hat advi...

CVE-2025-8053

Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow a low privilege user to interact with the backend API without sufficient privileges. This issue affects Flipper: 3.1....

CVE-2025-8053

Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow a low privilege user to interact with the backend API without sufficient privileges. This issue affects Flipper: 3.1....

CVE-2025-8053 Insufficient access control vulnerability has been discovered in Opentext Flipper.

Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels. The vulnerability could allow a low privilege user to interact with the backend API without sufficient privileges. This issue affects Flipper: 3.1....

EUVD-2025-30651

Malicious code in bioql PyPI...

EUVD-2025-30552

Malicious code in bioql PyPI...

CVE-2025-60120

Missing Authorization vulnerability in WPDirectoryKit WP Directory Kit wpdirectorykit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Directory Kit: from n/a through = 1.4.0...