1797 matches found
PT-2025-33382 · Elementor +1 · Elementor +1
Name of the Vulnerable Software and Affected Versions: hashthemes Easy Elementor Addons versions through 2.2.7 Description: The software contains a missing authorization flaw that allows exploiting incorrectly configured access control security levels. Recommendations: Update hashthemes Easy...
PT-2025-33374 · Unknown · Goodlayers Modernize
Name of the Vulnerable Software and Affected Versions: GoodLayers Modernize versions through 3.4.0 Description: The software contains a missing authorization flaw that allows exploitation due to incorrectly configured access control security levels. Recommendations: Update GoodLayers Modernize to...
WordPress plugin Cost Calculator 安全漏洞
WordPress Cost Calculator is a plugin for creating quote or cost estimation forms, which is mainly used to help users calculate prices based on different parameters in real time and generate professional quotes. WordPress Cost Calculator suffers from an authorization issue vulnerability that stem...
CVE-2025-7030
Privilege Defined With Unsafe Actions vulnerability in Drupal Two-factor Authentication TFA allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Two-factor Authentication TFA: from 0.0.0 before 1.11.0...
ServiceNow Now Platform 安全漏洞
ServiceNow Now Platform is a cloud-based platform from US-based ServiceNow that uses AI and machine learning to automate and optimize work across the enterprise. ServiceNow Now Platform has a security vulnerability that stems from a misconfiguration of access control lists that could lead to...
The vulnerability of the Blitz Identity Provider software, related to incorrect configuration of access rights, allows a hacker to send an email with arbitrary text to the user’s assigned email address.
The vulnerability of the Blitz Identity Provider software is related to incorrect configuration of access rights. Exploiting this vulnerability could allow a malicious actor to send an email with arbitrary text to the user’s associated account...
WordPress plugin POSIMYTH Innovation The Plus Addons for Elementor Pro 安全漏洞
WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress plugin POSIMYTH Innovation The...
WordPress plugin Trusty Whistleblowing 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...
WordPress plugin Audio Editor & Recorder 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2025-30990
Missing Authorization vulnerability in ThemeHunk ThemeHunk allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ThemeHunk: from n/a through 1.1.1...
CVE-2025-30927
Missing Authorization vulnerability in Wordapp Team Wordapp wordapp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wordapp: from n/a through = 1.7.0...
CVE-2025-30932
Missing Authorization vulnerability in WP Compress WP Compress for MainWP wp-compress-mainwp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Compress for MainWP: from n/a through = 6.30.32...
WordPress plugin FraudLabs Pro for WooCommerce 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
WordPress plugin bbPress API 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
WordPress plugin KI Live Video Conferences 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability exis...
CVE-2024-56255
Missing Authorization vulnerability in Stiofan AyeCode Connect ayecode-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AyeCode Connect: from n/a through = 1.3.8...
CVE-2024-56253
Missing Authorization vulnerability in supsystic Data Tables Generator by Supsystic data-tables-generator-by-supsystic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Data Tables Generator by Supsystic: from n/a through = 1.10.36...
CVE-2024-56002
Missing Authorization vulnerability in mightyforms Contact Form, Survey & Form Builder – MightyForms mightyforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form, Survey & Form Builder – MightyForms: from n/a through = 1.3.9...
CVE-2024-56236
Missing Authorization vulnerability in Juniper Hestia Nginx Cache hestia-nginx-cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hestia Nginx Cache: from n/a through = 2.4.0...
CVE-2024-56227
Missing Authorization vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Royal Elementor Addons: from n/a through = 1.7.1001...