CVE-2025-69363

Missing Authorization vulnerability in CyberChimps Responsive Addons for Elementor responsive-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Addons for Elementor: from n/a through = 2.0.8...

CVE-2025-69361

Missing Authorization vulnerability in PublishPress Post Expirator post-expirator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Expirator: from n/a through = 4.9.3...

CVE-2025-69352

Missing Authorization vulnerability in StellarWP The Events Calendar the-events-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Events Calendar: from n/a through = 6.15.12.2...

CVE-2025-69327

Missing Authorization vulnerability in magepeopleteam Car Rental Manager car-rental-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Car Rental Manager: from n/a through = 1.0.9...

CVE-2025-69349

Missing Authorization vulnerability in Fahad Mahmood RSS Feed Widget rss-feed-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RSS Feed Widget: from n/a through = 3.0.2...

CVE-2025-69341

Missing Authorization vulnerability in BuddhaThemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WeDesignTech Ultimate Booking Addon: from n/a through = 1.0.3...

CVE-2025-69354

Missing Authorization vulnerability in BBR Plugins Better Business Reviews better-business-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Better Business Reviews: from n/a through = 0.1.1...

CVE-2025-39477

Missing Authorization vulnerability in Sfwebservice InWave Jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects InWave Jobs: from n/a through 3.5.8...

CVE-2025-12640

CVE-2025-12640 concerns the WordPress plugin Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager . According to Wordfence, versions up to 3.1.5 are affected by an unauthorized arbitrary media replacement vulnerability caused by missing object-level authorizati...

PT-2026-1736

Name of the Vulnerable Software and Affected Versions sizam REHub Framework versions through 19.9.5 Description A missing authorization issue exists in the REHub Framework. This allows access to functionality that is not properly constrained by Access Control Lists ACLs. Recommendations Update to...

PT-2026-2198

Name of the Vulnerable Software and Affected Versions Munir Kamal Block Slider versions through 2.2.3 Description A missing authorization issue exists in Munir Kamal Block Slider, allowing exploitation of incorrectly configured access control security levels. Recommendations Versions prior to 2.2...

PT-2026-2194

Name of the Vulnerable Software and Affected Versions GA4WP: Google Analytics for WordPress versions through 2.10.0 Description A missing authorization issue exists in Passionate Brains GA4WP: Google Analytics for WordPress, allowing exploitation of incorrectly configured access control security...

PT-2026-2188

Name of the Vulnerable Software and Affected Versions Hakob Re Gallery & Responsive Photo Gallery Plugin versions through 1.17.18 Description The Hakob Re Gallery & Responsive Photo Gallery Plugin has a flaw related to incorrectly configured access control security levels, allowing for missing...

PT-2026-2192

Name of the Vulnerable Software and Affected Versions Bulk Landing Page Creator for WordPress LPagery versions through 2.4.9 Description The software contains a missing authorization issue, allowing exploitation of incorrectly configured access control security levels. Recommendations Update to a...

PT-2026-1738

Name of the Vulnerable Software and Affected Versions Kaira Blockons versions through 1.2.15 Description A missing authorization issue exists in Kaira Blockons. The issue allows access to functionality that is not properly constrained by Access Control Lists ACLs. Recommendations Update Kaira...

PT-2026-1894

Name of the Vulnerable Software and Affected Versions shinetheme Traveler versions through 3.2.6 Description The software contains a missing authorization issue related to incorrectly configured access control security levels. This allows for potential exploitation of the system. Recommendations...

PT-2026-1890

Name of the Vulnerable Software and Affected Versions Aruba HiSpeed Cache versions prior to 3.0.3 Description A missing authorization issue exists in Aruba HiSpeed Cache. The issue allows access to functionality that is not properly constrained by Access Control Lists ACLs. Recommendations Update...

PT-2026-1970

Name of the Vulnerable Software and Affected Versions G5Theme Zorka versions through 1.5.7 Description An issue exists in G5Theme Zorka related to incorrectly configured access control security levels, allowing for missing authorization. The issue allows exploitation of these levels...

PT-2026-1968

Name of the Vulnerable Software and Affected Versions Campaign Monitor for WordPress versions through 2.9.0 Description A missing authorization issue exists in Campaign Monitor for WordPress forms-for-campaign-monitor, allowing exploitation of incorrectly configured access control security levels...

PT-2026-2193

Name of the Vulnerable Software and Affected Versions Nawawi Jamili Docket Cache versions through 24.07.04 Description A missing authorization issue exists in Nawawi Jamili Docket Cache, allowing exploitation of incorrectly configured access control security levels. The issue impacts Docket Cache...