CVE-2025-49375

CVE-2025-49375 is a Missing Authorization / Broken Access Control vulnerability in the WordPress theme HomeLancer (

PT-2026-4249

Missing Authorization vulnerability in wpeverest User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through = 4.4.9...

PT-2026-4230

Missing Authorization vulnerability in Select-Themes Prowess prowess allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Prowess: from n/a through = 1.8.1...

PT-2026-4237

Missing Authorization vulnerability in Chandni Patel WP MapIt wp-mapit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP MapIt: from n/a through = 3.0.3...

PT-2026-4233

Missing Authorization vulnerability in WebAppick CTX Feed webappick-product-feed-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CTX Feed: from n/a through = 6.6.18...

PT-2026-4241

Missing Authorization vulnerability in hassantafreshi Easy Form Builder easy-form-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Form Builder: from n/a through = 3.9.6...

PT-2026-4036

Name of the Vulnerable Software and Affected Versions wpeverest User Registration versions through 4.4.6 Description An issue exists in wpeverest User Registration related to incorrectly configured access control security levels, allowing for missing authorization. The vulnerability allows...

PT-2026-4062

Name of the Vulnerable Software and Affected Versions cleverplugins SEO Booster versions through 6.1.8 Description An issue exists in SEO Booster related to incorrectly configured access control security levels, allowing for missing authorization. The vulnerability allows exploitation of these...

PT-2026-4022

Name of the Vulnerable Software and Affected Versions Tickera versions through 3.5.6.2 Description A missing authorization issue exists in Tickera tickera-event-ticketing-system, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Tickera to a...

PT-2026-4113

Name of the Vulnerable Software and Affected Versions Solace versions prior to 2.1.16 Description An authorization issue exists in Solace. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized access. Recommendations Update to a version later...

WordPress plugin Scalenut has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

PT-2026-4166

Missing Authorization vulnerability in designthemes Reservation Plugin dt-reservation-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Reservation Plugin: from n/a through = 1.7...

PT-2026-4076

Name of the Vulnerable Software and Affected Versions Ninja Team GDPR CCPA Compliance Support versions through 2.7.4 Description A missing authorization issue exists in Ninja Team GDPR CCPA Compliance Support ninja-gdpr-compliance, allowing exploitation of incorrectly configured access control...

PT-2026-4261

Missing Authorization vulnerability in bookingalgorithms BA Book Everything ba-book-everything allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BA Book Everything: from n/a through = 1.8.16...

PT-2026-4245

Missing Authorization vulnerability in uxper Golo golo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Golo: from n/a through 1.7.5...

PT-2026-4242

Missing Authorization vulnerability in Rasedul Haque Rumi BD Courier Order Ratio Checker bd-courier-order-ratio-checker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BD Courier Order Ratio Checker: from n/a through = 2.0.1...

PT-2026-4177

Missing Authorization vulnerability in e-plugins Institutions Directory institutions-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Institutions Directory: from n/a through = 1.3.4...

PT-2026-4011

Name of the Vulnerable Software and Affected Versions merkulove Comparimager for Elementor versions through 1.0.1 Description An authorization issue exists in merkulove Comparimager for Elementor comparimager-elementor, allowing exploitation of incorrectly configured access control security level...

PT-2026-4048

Name of the Vulnerable Software and Affected Versions renatoatshown Shown Connector versions through 1.2.10 Description An authorization issue exists in renatoatshown Shown Connector shown-connector. The issue involves incorrectly configured access control security levels, potentially allowing...

PT-2026-4008

Name of the Vulnerable Software and Affected Versions Audier For Elementor versions through 1.0.9 Description An issue exists in Audier For Elementor related to incorrectly configured access control security levels, allowing for missing authorization. The issue allows exploitation of these securi...