PT-2025-5427 · Haptiq · Picu – Online Photo Proofing Gallery

Name of the Vulnerable Software and Affected Versions: picu – Online Photo Proofing Gallery versions prior to 2.4.0 Description: The issue is related to a lack of authorization in Haptiq picu – Online Photo Proofing Gallery, which allows the exploitation of incorrectly configured access control...

PT-2025-5142 · Papercite · Papercite

Name of the Vulnerable Software and Affected Versions: PAPERCITE versions 0.5.18 and earlier Description: The issue is related to a lack of authorization in PAPERCITE, allowing the exploitation of incorrectly configured access control security levels. Recommendations: For versions 0.5.18 and...

PT-2025-5476 · Unknown · Admin/Site Enhancements (Ase) Pro

Name of the Vulnerable Software and Affected Versions: Admin and Site Enhancements ASE Pro versions n/a through 7.6.1.1 Description: The issue is related to a lack of authorization in Admin and Site Enhancements ASE Pro, which allows the exploitation of incorrectly configured access control...

PT-2025-5231 · Xola · Xola

Name of the Vulnerable Software and Affected Versions: Xola versions n/a through 1.6 Description: The issue is related to a missing authorization vulnerability in Xola, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For versions n/a throug...

CVE-2024-56295

Missing Authorization vulnerability in Poll Maker Team Poll Maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through 5.5.6...

CVE-2024-13309 Login Disable - Critical - Access bypass - SA-CONTRIB-2024-073

Improper Authentication vulnerability in Drupal Login Disable allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login Disable: from 2.0.0 before 2.1.1...

CVE-2023-47807

Missing Authorization vulnerability in 10Web 10WebAnalytics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 10WebAnalytics: from n/a through 1.2.12...

CVE-2023-46309

Missing Authorization vulnerability in gVectors Team wpDiscuz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpDiscuz: from n/a through 7.6.10...

CVE-2023-45766

Missing Authorization vulnerability in Poll Maker Team Poll Maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through 4.7.1...

CVE-2023-45760

Missing Authorization vulnerability in gVectors Team wpDiscuz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpDiscuz: from n/a through 7.6.3...

CVE-2023-44258

Missing Authorization vulnerability in Schema App Schema App Structured Data allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Schema App Structured Data: from n/a through 1.23.1...

PT-2025-1526 · Unknown · Generate Dummy Posts

Name of the Vulnerable Software and Affected Versions: Generate Dummy Posts versions 1.0.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. This can lead to unauthorized access du...

PT-2025-1520 · Nsquared · Nsquared Draw Attention

Name of the Vulnerable Software and Affected Versions: NSquared Draw Attention versions 2.0.15 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions 2.0.1...

PT-2025-1549 · Unknown · Porto Theme - Functionality

Name of the Vulnerable Software and Affected Versions: Porto Theme - Functionality versions prior to 2.12.1 Description: The issue is related to a missing authorization vulnerability in Porto Theme - Functionality, which allows exploiting incorrectly configured access control security levels...

CVE-2023-40670

Missing Authorization vulnerability in ReviewX Team ReviewX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReviewX: from n/a through 1.6.17...

CVE-2023-40003

Missing Authorization vulnerability in weDevs WP Project Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Project Manager: from n/a through 2.6.7...

CVE-2023-39995

Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Portfolio and Projects portfolio-and-projects allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Portfolio and Projects: from n/a through = 1.3.7...

CVE-2023-39305

Missing Authorization vulnerability in Dash Labs Yet Another Stars Rating yet-another-stars-rating allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Yet Another Stars Rating: from n/a through = 3.4.3...

CVE-2023-37987

Missing Authorization vulnerability in miniOrange YourMembership Single Sign On login-with-yourmembership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YourMembership Single Sign On: from n/a through = 1.1.3...

CVE-2023-36510

Missing Authorization vulnerability in catkin ReDi Restaurant Reservation redi-restaurant-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReDi Restaurant Reservation: from n/a through = 23.0211...