CVE-2025-30416

CVE-2025-30416 affects Acronis Cyber Protect 16 (Linux/Windows) prior to build 39938 and Cyber Protect 15 prior to build 41800. The described issue is missing authorization that allows sensitive data disclosure and manipulation, with a CVSS v3.0 score of 10.0 (CRITICAL) and network attack vector,...

PT-2026-21121

Name of the Vulnerable Software and Affected Versions Saad Iqbal New User Approve versions through 3.2.0 Description An authorization issue exists in the New User Approve functionality, allowing exploitation due to incorrectly configured access control security levels. The affected functionality ...

PT-2026-21198

Name of the Vulnerable Software and Affected Versions PDF for Elementor Forms + Drag And Drop Template Builder versions through 6.3.1 Description A missing authorization issue exists in PDF for Elementor Forms + Drag And Drop Template Builder. The issue involves exploiting incorrectly configured...

PT-2026-21071

Name of the Vulnerable Software and Affected Versions Plugin BlueX for WooCommerce versions through 3.1.6 Description An issue exists in Plugin BlueX for WooCommerce related to incorrectly configured access control security levels, potentially allowing unauthorized access. The issue involves a...

PT-2026-21034

Name of the Vulnerable Software and Affected Versions staviravn AIO WP Builder versions through 2.0.2 Description An authorization issue exists in staviravn AIO WP Builder all-in-one-wp-builder, allowing exploitation of incorrectly configured access control security levels. Recommendations Update...

PT-2026-21230

Name of the Vulnerable Software and Affected Versions weDevs Subscribe2 versions through 10.44 Description An authorization issue exists in weDevs Subscribe2, allowing exploitation of incorrectly configured access control security levels. Recommendations Update weDevs Subscribe2 to a version late...

PT-2026-21091

Name of the Vulnerable Software and Affected Versions PDF for WPForms versions through 6.3.0 Description A missing authorization issue exists in PDF for WPForms, allowing exploitation due to incorrectly configured access control security levels. The issue is present in add-ons.org PDF for WPForms...

PT-2026-21228

Name of the Vulnerable Software and Affected Versions WP Job Portal versions through 2.4.4 Description The WP Job Portal software contains a flaw related to incorrectly configured access control security levels, potentially allowing unauthorized access. The issue is a missing authorization check...

PT-2026-21072

Name of the Vulnerable Software and Affected Versions Addonify – Compare Products For WooCommerce versions through 1.1.17 Description The Addonify – Compare Products For WooCommerce addon has an issue related to incorrectly configured access control security levels, allowing for unauthorized...

PT-2026-21041

Name of the Vulnerable Software and Affected Versions uixthemes Konte versions through 2.4.6 Description An authorization issue exists in uixthemes Konte. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized access. Recommendations Update...

PT-2026-21050

Name of the Vulnerable Software and Affected Versions VillaTheme HAPPY versions through 1.0.8 Description The software contains a missing authorization flaw due to incorrectly configured access control security levels. This allows for potential exploitation. Recommendations Update VillaTheme HAPP...

PT-2026-21070

Name of the Vulnerable Software and Affected Versions ConveyThis versions prior to 269.6 Description An authorization issue exists in ConveyThis conveythis-translate, allowing exploitation of incorrectly configured access control security levels. Recommendations Update to a version prior to 269.6...

PT-2026-21078

Name of the Vulnerable Software and Affected Versions Passionate Brains Advanced WC Analytics versions through 3.19.0 Description An authorization issue exists in Passionate Brains Advanced WC Analytics, allowing exploitation due to incorrectly configured access control security levels...

PT-2026-21174

Name of the Vulnerable Software and Affected Versions Jthemes Exzo versions through 1.2.4 Description A missing authorization issue exists in Jthemes Exzo, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Jthemes Exzo to a version later than...

PT-2026-21049

Name of the Vulnerable Software and Affected Versions aDirectory versions through 3.0.3 Description The software contains a missing authorization issue stemming from incorrectly configured access control security levels. This allows for exploitation of the system. Recommendations Update aDirector...

PT-2026-21080

Name of the Vulnerable Software and Affected Versions Travelpayouts versions through 1.2.1 Description An authorization issue exists in Travelpayouts travelpayouts, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Travelpayouts to a version...

PT-2026-21199

Name of the Vulnerable Software and Affected Versions WP FullCalendar versions through 1.6 Description The WP FullCalendar software contains a missing authorization flaw. This allows exploitation of incorrectly configured access control security levels. No information is available regarding the...

PT-2026-21074

Name of the Vulnerable Software and Affected Versions Addonify Floating Cart For WooCommerce versions through 1.2.17 Description An authorization issue exists in Addonify Floating Cart For WooCommerce. The issue involves incorrectly configured access control security levels, potentially allowing...

PT-2026-21025

Name of the Vulnerable Software and Affected Versions Shared Files versions through 1.7.19 Description A missing authorization flaw exists in Anssi Laitila Shared Files shared-files. The issue impacts the application's ability to properly restrict access to resources. Recommendations Update to a...

PT-2026-21043

Name of the Vulnerable Software and Affected Versions knitpay UPI QR Code Payment Gateway for WooCommerce versions through 1.5.1 Description The software contains a missing authorization issue related to incorrectly configured access control security levels. This allows for exploitation of the...