CVE-2025-66121 WordPress SiteGround Security plugin <= 1.5.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in SiteGround SiteGround Security sg-security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteGround Security: from n/a through = 1.5.8...

CVE-2025-66124

CVE-2025-66124: WordPress Leaky Paywall plugin (ZEEN101 Leaky Paywall)

CVE-2025-64639 WordPress WP Compress for MainWP plugin <= 6.50.17 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Compress WP Compress for MainWP wp-compress-mainwp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Compress for MainWP: from n/a through = 6.50.17...

CVE-2025-66124 WordPress Leaky Paywall plugin <= 4.22.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in ZEEN101 Leaky Paywall leaky-paywall allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Leaky Paywall: from n/a through = 4.22.6...

CVE-2025-66121

CVE-2025-66121 affects the WordPress plugin SiteGround Security (sg-security) , versions up to and including 1.5.8. The issue is described as a Missing Authorization / Broken Access Control vulnerability arising from incorrectly configured access control security levels, enabling exploitation aga...

CVE-2025-66122

CVE-2025-66122 affects WordPress plugin Stylish Price List (versions up to 7.2.2). The issue is Missing Authorization / Broken Access Control, enabling exploitation of improperly configured access controls. Connected sources corroborate: Red Hat and EUVD entries mirror the same description, and P...

CVE-2025-64635

CVE-2025-64635 affects the WordPress plugin Feeds for YouTube (Syed Balkhi Feeds for YouTube) up to version 2.4.0. The issue is a Missing Authorization vulnerability due to incorrectly configured access control security levels, allowing unauthorized access as described in multiple sources. Impact...

CVE-2025-64638 WordPress OnPay.io for WooCommerce plugin <= 1.0.47 - Broken Access Control vulnerability

Missing Authorization vulnerability in OnPay.io OnPay.io for WooCommerce onpay-io-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OnPay.io for WooCommerce: from n/a through = 1.0.47...

CVE-2025-64634

CVE-2025-64634 affects the WordPress ThemeFusion Avada theme (versions up to 7.13.2). The root cause is a missing authorization check on a function, allowing authenticated users (subscriber level and up) to access functionality not properly constrained by ACLs. CVSS v3.1 base score is 5.3 (Medium...

CVE-2025-64638 WordPress OnPay.io for WooCommerce plugin <= 1.0.47 - Broken Access Control vulnerability

Missing Authorization vulnerability in OnPay.io OnPay.io for WooCommerce onpay-io-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OnPay.io for WooCommerce: from n/a through = 1.0.47...

CVE-2025-64635 WordPress Feeds for YouTube plugin <= 2.4.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Syed Balkhi Feeds for YouTube feeds-for-youtube allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Feeds for YouTube: from n/a through = 2.4.0...

CVE-2025-64634 WordPress Avada theme <= 7.13.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeFusion Avada avada allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Avada: from n/a through = 7.13.2...

CVE-2025-64634 WordPress Avada theme <= 7.13.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeFusion Avada avada allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Avada: from n/a through = 7.13.2...

CVE-2025-64631 WordPress WCFM Marketplace plugin <= 3.7.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCFM Marketplace: from n/a through = 3.7.1...

CVE-2025-64632

The CVE-2025-64632 entry concerns the WordPress Google XML Sitemaps plugin with versions up to and including 4.1.21. The root cause is a missing authorization / broken access control, allowing exploitation due to incorrectly configured access levels. Public sources in the connected documents conf...

CVE-2025-64632 WordPress Google XML Sitemaps plugin <= 4.1.22 - Broken Access Control vulnerability

Missing Authorization vulnerability in Auctollo Google XML Sitemaps google-sitemap-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Google XML Sitemaps: from n/a through = 4.1.22...

CVE-2025-64630

Technical details about CVE-2025-64630 (Business Directory Plugin issue) are not provided in the initial document or connected sources. Public information on affected versions, root cause, and fixes is therefore not available here; monitor for updates.

CVE-2025-64630 WordPress Business Directory plugin <= 6.4.19 - Broken Access Control vulnerability

Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business Directory: from n/a through = 6.4.19...

CVE-2025-64630 WordPress Business Directory plugin <= 6.4.19 - Broken Access Control vulnerability

Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business Directory: from n/a through = 6.4.19...

CVE-2025-64631 WordPress WCFM Marketplace plugin <= 3.7.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCFM Marketplace: from n/a through = 3.7.1...