PT-2025-53088

Name of the Vulnerable Software and Affected Versions WpStream versions through 4.9.5 Description A missing authorization issue exists in WpStream, allowing exploitation of incorrectly configured access control security levels. Recommendations Update WpStream to a version newer than 4.9.5...

PT-2025-53281

Name of the Vulnerable Software and Affected Versions WP Adminify versions through 4.0.6.1 Description The software contains a missing authorization issue that allows exploiting incorrectly configured access control security levels. Recommendations Update WP Adminify to a version later than 4.0.6...

EUVD-2025-204790

Missing Authorization vulnerability in Vikas Ratudi Chakra test allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chakra test: from n/a through 1.0.1...

EUVD-2025-204789

Missing Authorization vulnerability in VillaTheme HAPPY allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HAPPY: from n/a through 1.0.9...

CVE-2025-68557

Missing Authorization vulnerability in Vikas Ratudi Chakra test chakra-test allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chakra test: from n/a through = 1.0.1...

CVE-2025-68556

Missing Authorization vulnerability in VillaTheme HAPPY happy-helpdesk-support-ticket-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HAPPY: from n/a through = 1.0.9...

EUVD-2024-22207

Missing Authorization vulnerability in IdeaBox Creations PowerPack Pro for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PowerPack Pro for Elementor: from n/a through 2.10.6...

CVE-2024-24844 WordPress PowerPack Pro for Elementor plugin <= 2.10.6 - Unauthenticated Plugin Settings Reset vulnerability

Missing Authorization vulnerability in IdeaBox Creations PowerPack Pro for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PowerPack Pro for Elementor: from n/a through 2.10.6...

CVE-2025-68556 WordPress HAPPY plugin <= 1.0.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in VillaTheme HAPPY allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HAPPY: from n/a through 1.0.9...

CVE-2025-68556 WordPress HAPPY plugin <= 1.0.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in VillaTheme HAPPY happy-helpdesk-support-ticket-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HAPPY: from n/a through = 1.0.9...

CVE-2025-68556

CVE-2025-68556 concerns the WordPress package VillaTheme HAPPY plugin . Multiple sources describe a Missing Authorization / Broken Access Control vulnerability in HAPPY versions up to and including 1.0.9 , caused by an incorrectly configured access control security level. The impact is described ...

CVE-2025-68556

Missing Authorization vulnerability in VillaTheme HAPPY allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HAPPY: from n/a through 1.0.9...

CVE-2025-68557 WordPress Chakra test plugin <= 1.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Vikas Ratudi Chakra test chakra-test allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chakra test: from n/a through = 1.0.1...

CVE-2025-68557 WordPress Chakra test plugin <= 1.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Vikas Ratudi Chakra test chakra-test allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chakra test: from n/a through = 1.0.1...

CVE-2025-68557

Summary (CVE-2025-68557): A missing authorization vulnerability exists in the WordPress Chakra test plugin up to version 1.0.1, caused by misconfigured access control security levels. This affects Chakra test plugins for WordPress (WordPress plugin product line) and could allow unauthorized acces...

Missing Authorization

Jenkins is vulnerable to Missing Authorization. The vulnerability is due to a missing permission check on viewing encrypted credential data, which allows attackers with only View/Read permissions to access and view encrypted password values in views...

CVE-2025-14155 Premium Addons for Elementor <= 4.11.53 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'get_template_content'

The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'gettemplatecontent' function in all versions up to, and including, 4.11.53. This makes it possible for...

WordPress Beaver Builder – WordPress Page Builder plugin <= 2.9.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Update vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Post Update vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin Beaver Builder versions = 2.9.4.1...

PT-2025-52740

Name of the Vulnerable Software and Affected Versions Chakra test versions through 1.0.1 Description A missing authorization issue exists in Chakra test, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Chakra test to a version newer than 1.0....

PT-2025-52739

Name of the Vulnerable Software and Affected Versions VillaTheme HAPPY versions through 1.0.9 Description A missing authorization issue exists in VillaTheme HAPPY, allowing exploitation of incorrectly configured access control security levels. Recommendations Update VillaTheme HAPPY to a version...