WordPress Premmerce Brands for WooCommerce plugin <= 1.2.13 - Missing Authorization To Authenticated (Subscriber+) Brand Permalink Settings Update vulnerability

Missing Authorization To Authenticated Subscriber+ Brand Permalink Settings Update vulnerability discovered by WordFence in WordPress Plugin Premmerce Brands for WooCommerce versions = 1.2.13...

PT-2025-54354

Name of the Vulnerable Software and Affected Versions PHPGurukul Small CRM version 4.0 Description A security flaw exists in PHPGurukul Small CRM 4.0, impacting an unknown function within the /admin/edit-user.php file. This allows for missing authorization, enabling remote attacks. The exploit fo...

PT-2025-54407

Missing Authorization vulnerability in merkulove Slider for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Slider for Elementor: from n/a through 1.0.10...

PT-2025-54452

Name of the Vulnerable Software and Affected Versions Merkulove Worker for WPBakery versions through 1.1.1 Description The software contains a missing authorization issue stemming from incorrectly configured access control security levels. This allows for potential exploitation. Recommendations...

PT-2025-54333

Name of the Vulnerable Software and Affected Versions Mohammed Kaludi Core Web Vitals & PageSpeed Booster versions through 1.0.27 Description The software contains a missing authorization issue stemming from incorrectly configured access control security levels. Recommendations Update Mohammed...

PT-2025-54352

Name of the Vulnerable Software and Affected Versions WP Grids EasyTest versions through 1.0.1 Description An authorization issue exists in WP Grids EasyTest, allowing exploitation due to incorrectly configured access control security levels. This allows unauthorized access. Recommendations Updat...

PT-2025-54359

Name of the Vulnerable Software and Affected Versions Damian WP Export Categories & Taxonomies versions through 1.0.3 Description A missing authorization issue exists in Damian WP Export Categories & Taxonomies, allowing exploitation due to incorrectly configured access control security levels...

PT-2025-54341

Name of the Vulnerable Software and Affected Versions Marco Milesi WP Attachments versions through 5.2 Description A missing authorization issue exists in Marco Milesi WP Attachments, stemming from incorrectly configured access control security levels. This allows for potential exploitation of th...

WordPress Fluent Booking - The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution plugin <= 1.9.11 - Authenticated (Subscriber+) Missing Authorization to Calendar Import and Management vulnerability

WordPress Fluent Booking - The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution plugin = 1.9.11 - Authenticated Subscriber+ Missing Authorization to Calendar Import and Management vulnerability discovered by Md. Moniruzzaman Prodhan NomanProdhan - Knight Squad in WordPre...

PT-2025-54342

Name of the Vulnerable Software and Affected Versions Reuters Direct versions through 3.0.0 Description A missing authorization issue exists in Reuters Direct, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Reuters Direct to a version later...

PT-2025-54346

Name of the Vulnerable Software and Affected Versions 101gen Wawp versions through 4.0.5 Description A missing authorization issue exists in 101gen Wawp, allowing exploitation due to incorrectly configured access control security levels. Recommendations Versions prior to 4.0.5 are affected. At th...

PT-2025-54369

Name of the Vulnerable Software and Affected Versions Themesawesome History Timeline versions through 1.0.6 Description A missing authorization flaw exists in Themesawesome History Timeline, stemming from incorrectly configured access control security levels. This allows for potential exploitatio...

PT-2025-54395

Missing Authorization vulnerability in ThemeBoy Hide Plugins allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hide Plugins: from n/a through 1.0.4...

WordPress Post Saint plugin <= 1.3.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by Lucio Sá in WordPress Plugin Post Saint versions = 1.3.1...

WordPress JetFormBuilder plugin <= 3.5.3 - Missing Authorization to Unauthenticated Form Generation vulnerability

Missing Authorization to Unauthenticated Form Generation vulnerability discovered by Tri Firdyanto Firdy - ZeroByte in WordPress Plugin JetFormBuilder versions = 3.5.3...

WordPress Frontend Dashboard plugin 1.5.10 - 2.2.7 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via ajax_request Function vulnerability

WordPress Frontend Dashboard plugin 1.5.10 - 2.2.7 - Missing Authorization to Authenticated Subscriber+ Account Takeover/Privilege Escalation via ajaxrequest Function vulnerability discovered by kr0d in WordPress Plugin Frontend Dashboard versions 1.5.10-2.2.7...

WordPress Email Notifications for Updates plugin <= 1.1.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Options Update vulnerability discovered by kr0d in WordPress Plugin Email Notifications for Updates versions = 1.1.6...

PT-2025-54349

Name of the Vulnerable Software and Affected Versions nicdark Hotel Booking versions through 3.8 Description An authorization issue exists in nicdark Hotel Booking, allowing exploitation of incorrectly configured access control security levels. This enables unauthorized access to the system...

PT-2025-54387

Missing Authorization vulnerability in Digages Direct Payments WP allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Direct Payments WP: from n/a through 1.3.0...

PT-2025-54373

Missing Authorization vulnerability in Mykola Lukin Orders Chat for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Orders Chat for WooCommerce: from n/a through 1.2.0...