CVE-2025-53343 WordPress Modernize Theme <= 3.4.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in GoodLayers Modernize allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Modernize: from n/a through 3.4.0...

CVE-2025-54717

CVE-2025-54717 affects the WordPress WP Membership plugin (versions up to 1.6.3). It is a Missing Authorization flaw due to incorrectly configured access control security levels, enabling a settings change vulnerability. Remediation: upgrade WP Membership to a version later than 1.6.3 (per Patchs...

CVE-2025-55716

CVE-2025-55716 concerns the WordPress plugin WP Statistics (versions up to 14.15). The issue is described as a Missing Authorization vulnerability due to incorrectly configured access control levels, enabling unauthorized actions without user interaction. The CVSS 3.1 base metrics indicate a Netw...

CVE-2025-54679

Missing Authorization vulnerability in vertim Neon Channel Product Customizer Free neon-channel-product-customizer-free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Neon Channel Product Customizer Free: from n/a through = 2.0...

CVE-2025-52775

Missing Authorization vulnerability in Ronik@UnlimitedWP Project Cost Calculator project-cost-calculator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Project Cost Calculator: from n/a through = 1.0.0...

CVE-2025-52721

Missing Authorization vulnerability in LCweb Global Gallery allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Global Gallery: from n/a through 9.2.3...

CVE-2025-50029

Missing Authorization vulnerability in Ashish AI Tools artificial-intelligence-auto-content-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Tools: from n/a through = 4.0.7...

CVE-2025-50031

Missing Authorization vulnerability in syedamirhussain91 DB Backup db-backup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DB Backup: from n/a through = 6.0...

CVE-2025-49052

Missing Authorization vulnerability in Dariolee Netease Music netease-music allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Netease Music: from n/a through = 3.2.1...

CVE-2025-54695 WordPress HT Mega Plugin plugin <= 2.9.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in DevItems HT Mega ht-mega-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HT Mega: from n/a through = 2.9.0...

CVE-2025-54679

CVE-2025-54679 relates to the Neon Channel Product Customizer Free WordPress plugin (versions

CVE-2025-28962

CVE-2025-28962: WordPress/ plugin "Advanced Google Universal Analytics" (stefanoai) has a Missing Authorization vulnerability. The issue arises from misconfigured access control levels, enabling unauthorized access to potentially sensitive data. Affected software versions: Advanced Google Univers...

CVE-2025-30639

CVE-2025-30639 is a Missing Authorization vulnerability affecting the WordPress plugin IDonatePro (ThemeAtelier) up to version 2.1.9. The available documents indicate an access control misconfiguration that could allow an attacker to access restricted functionality or data without proper authoriz...

CVE-2025-30639 WordPress IDonatePro Plugin <= 2.1.9 - Broken Access Control Vulnerability

Missing Authorization vulnerability in ThemeAtelier IDonatePro idonate-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IDonatePro: from n/a through = 2.1.9...

CVE-2025-30993

CVE-2025-30993 is a real, published issue affecting the WordPress plugin “Thank You Page Customizer for WooCommerce – Increase Your Sales” (versions up to 1.1.7). The vulnerability is described as Missing/Broken Authorization, i.e., flawed access control that could be exploited due to incorrectly...

CVE-2025-50029 WordPress AI Tools <= 4.0.7 - Arbitrary Content Deletion Vulnerability

Missing Authorization vulnerability in Ashish AI Tools allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AI Tools: from n/a through 4.0.7...

CVE-2025-52721 WordPress Global Gallery Plugin <= 9.2.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in LCweb Global Gallery allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Global Gallery: from n/a through 9.2.3...

CVE-2025-52721

CVE-2025-52721 concerns the Global Gallery WordPress plugin (versions up to 9.2.3). It describes a Missing Authorization / Broken Access Control vulnerability enabling an unauthorized user to exploit access control misconfigurations. Public sources indicate the affected software is Global Gallery...

CVE-2025-52721 WordPress Global Gallery Plugin <= 9.2.3 - Broken Access Control Vulnerability

Missing Authorization vulnerability in LCweb Global Gallery allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Global Gallery: from n/a through 9.2.3...

CVE-2025-52775

CVE-2025-52775 concerns the WordPress plugin Project Cost Calculator (versions ≤ 1.0.0). The issue is a missing/ broken authorization flaw caused by incorrectly configured access control security levels, enabling unauthorized access to cost calculator data. CVSS v3.1 metrics: AV:N, AC:L, PR:L, UI...