400 matches found
CVE-2025-23615
Missing Authorization vulnerability in gtekelis Interactive Page Hierarchy interactive-page-hierarchy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Interactive Page Hierarchy: from n/a through = 1.0.1...
CVE-2025-23515 WordPress ts-tree plugin <= 0.1.1 - Arbitrary Content Deletion vulnerability
Missing Authorization vulnerability in tsecher ts-tree ts-tree allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ts-tree: from n/a through = 0.1.1...
CVE-2025-26960
CVE-2025-26960 is a Missing Authorization vulnerability in the WordPress plugin Small Package Quotes – Unishippers Edition , affecting versions up to 2.4.9. It arises from incorrectly configured access control, enabling unauthenticated access to restricted operations according to the CVSS 3.1 vec...
CVE-2025-22657
Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Atarim: from n/a through = 4.0.9...
CVE-2025-23534 WordPress WPLingo plugin <= 1.1.2 - Arbitrary Content Deletion vulnerability
Missing Authorization vulnerability in Mark Winiarski WPLingo wplingo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPLingo: from n/a through = 1.1.2...
WordPress plugin IdeaPush 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2025-22318
Missing Authorization vulnerability in enituretechnology Standard Box Sizes – for WooCommerce standard-box-sizes.This issue affects Standard Box Sizes – for WooCommerce: from n/a through = 1.6.13...
CVE-2024-32724
Missing Authorization vulnerability in Woo product importer Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy.This issue affects Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy: from n/a through 2.1.1...
CVE-2024-1438
Missing Authorization vulnerability in PressFore Rolo Slider.This issue affects Rolo Slider: from n/a through 1.0.9...
CVE-2024-35672
Missing Authorization vulnerability in Netgsm.This issue affects Netgsm: from n/a through 2.9.19...
CVE-2025-22677
CVE-2025-22677: WordPress Uix Shortcodes
CVE-2025-24744
Missing Authorization vulnerability in NotFound Bridge Core. This issue affects Bridge Core: from n/a through 3.3...
CVE-2025-23529 WordPress Minterpress plugin <= 1.0.5 - Arbitrary Content Deletion vulnerability
Missing Authorization vulnerability in blokhauswp Minterpress minterpress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Minterpress: from n/a through = 1.0.5...
PT-2025-5448 · Unknown · Fv Thoughtful Comments
Name of the Vulnerable Software and Affected Versions: FV Thoughtful Comments versions 0.3.5 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For version...
PT-2025-5235 · WordPress · Wordpress Graphs & Charts
Name of the Vulnerable Software and Affected Versions: WordPress Graphs & Charts versions prior to 2.0.9 Description: The issue is related to a missing authorization vulnerability in WP Tasker WordPress Graphs & Charts, which allows exploiting incorrectly configured access control security levels...
CVE-2024-56276
Missing Authorization vulnerability in Syed Balkhi Contact Form by WPForms wpforms-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form by WPForms: from n/a through = 1.9.2.2...
WordPress plugin ST Gallery WP 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2025-4475 · WordPress · Orion Allada T-Shirt Designer For Woocommerce
Name of the Vulnerable Software and Affected Versions: ORION Allada T-shirt Designer for Woocommerce versions 1.1 and earlier Description: The issue is related to a Missing Authorization vulnerability. This problem affects the ORION Allada T-shirt Designer for Woocommerce, allowing unauthorized...
PT-2025-4434 · Unknown · Social Media Share Buttons | Mashshare
Name of the Vulnerable Software and Affected Versions: Social Media Share Buttons | MashShare versions n/a through 4.0.47 Description: The issue is related to a Missing Authorization vulnerability in Social Media Share Buttons | MashShare. This vulnerability affects the authorization process,...
