CVE-2025-57896

CVE-2025-57896 affects the WordPress plugin Church Admin (andy_moyle) up to version 5.0.26, with a Missing Authorization vulnerability due to incorrectly configured access control security levels. Public sources confirm this as a WordPress plugin vulnerability affecting Church Admin up to 5.0.26;...

CVE-2025-57896 WordPress Church Admin Plugin <= 5.0.26 - Broken Access Control Vulnerability

Missing Authorization vulnerability in andymoyle Church Admin allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Church Admin: from n/a through 5.0.26...

CVE-2025-57894

CVE-2025-57894 : The WordPress plugin WPPizza (versions up to 3.19.8) has a Missing Authorization / Broken Access Control vulnerability. The issue arises from incorrectly configured access control security levels. Public sources (NVD, Patchstack, CVE listings) confirm the vulnerability and affect...

CVE-2025-57884

CVE-2025-57884 – Greenshift Broken Access Control : WordPress Greenshift plugin (wpsoul) up to version 12.1.1 is affected by a Missing Authorization / Broken Access Control vulnerability. The CVSSv3.1 base score is 4.3 (Medium) with network access, low attack complexity, and no user interaction. ...

CVE-2025-54040

Missing Authorization vulnerability in Webba Appointment Booking Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webba Booking: from n/a through = 5.1.20...

CVE-2025-54025

Missing Authorization vulnerability in Elliot Sowersby / RelyWP Coupon Affiliates woo-coupon-usage allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Coupon Affiliates: from n/a through = 6.4.0...

PT-2025-34358 · WordPress · Wppizza

Name of the Vulnerable Software and Affected Versions: WPPizza versions through 3.19.8 Description: The WPPizza plugin suffers from a missing authorization issue, allowing exploitation of incorrectly configured access control security levels. Recommendations: At the moment, there is no informatio...

PT-2025-34360 · Andy Moyle · Andy Moyle Church Admin

Name of the Vulnerable Software and Affected Versions: andy moyle Church Admin versions through 5.0.26 Description: The software contains a missing authorization flaw due to incorrectly configured access control security levels. Recommendations: Update andy moyle Church Admin to a version later...

CVE-2025-55383

Moss before v0.15 has a file upload vulnerability. The "upload" function configuration allows attackers to upload files of any extension to any location on the target server...

CVE-2025-54025

Missing Authorization vulnerability in Elliot Sowersby / RelyWP Coupon Affiliates woo-coupon-usage allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Coupon Affiliates: from n/a through = 6.4.0...

CVE-2025-49896

Cross-Site Request Forgery CSRF vulnerability in wptasker WP Discord Post Plus – Supports Unlimited Channels allows Cross Site Request Forgery. This issue affects WP Discord Post Plus – Supports Unlimited Channels: from n/a through 1.0.2...

CVE-2025-54025 WordPress Coupon Affiliates Plugin <= 6.4.0 - Settings Change Vulnerability

Missing Authorization vulnerability in Elliot Sowersby / RelyWP Coupon Affiliates allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Coupon Affiliates: from n/a through 6.4.0...

PT-2025-34010 · Unknown · Webba Booking

Name of the Vulnerable Software and Affected Versions: Webba Booking versions through 5.1.20 Description: A missing authorization flaw exists in Webba Appointment Booking Webba Booking, allowing exploitation of incorrectly configured access control security levels. Recommendations: At the moment,...

PT-2025-34004 · WordPress · Relywp Coupon Affiliates

Name of the Vulnerable Software and Affected Versions: RelyWP Coupon Affiliates versions through 6.4.0 Description: A missing authorization flaw exists in Elliot Sowersby / RelyWP Coupon Affiliates, allowing exploitation of incorrectly configured access control security levels. Recommendations:...

PT-2025-33938 · WordPress · Themify Builder

Name of the Vulnerable Software and Affected Versions: Themify Builder versions through 7.6.7 Description: A missing authorization issue exists in Themify Builder, allowing exploitation of incorrectly configured access control security levels. Recommendations: Update Themify Builder to a version...

CVE-2025-55306 GenX_FX authentication bypass in JWT validation

GenXFX is an advance IA trading platform that will focus on forex trading. A vulnerability was identified in the GenX FX backend where API keys and authentication tokens may be exposed if environment variables are misconfigured. Unauthorized users could gain access to cloud resources Google Cloud...

CVE-2025-55306

GenX_FX backend vulnerability: environment-variable misconfiguration can expose API keys and authentication tokens, enabling unauthorized access to cloud resources (Google Cloud, Firebase, GitHub, etc.). Impact is high (credential exposure with potential full resource access) as reported across m...

GenX FX Trading System 安全漏洞

GenX FX Trading System is a trading platform focused on forex trading by KEA MOUYLENG individual developers. A security vulnerability exists in GenX FX Trading System that stems from an improperly configured environment variable that could lead to the disclosure of API keys and authentication...

Linux Distros Unpatched Vulnerability : CVE-2019-17383

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The netaddr gem before 2.0.4 for Ruby has misconfigured file permissions, such that a gem install may result in 0777 permissions in the target filesystem...

CVE-2025-49432

Missing Authorization vulnerability in FWDesign Ultimate Video Player fwduvp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Video Player: from n/a through = 10.1...