Lucene search
+L

4040 matches found

NVD
NVD
•added 2025/12/16 9:15 a.m.•14 views

CVE-2025-64244

Missing Authorization vulnerability in Codexpert, Inc Restrict Elementor Widgets, Columns and Sections restrict-elementor-widgets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restrict Elementor Widgets, Columns and Sections: from n/a through = 1.12...

4.3CVSS0.0022EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/16 9:15 a.m.•21 views

CVE-2025-64246

Missing Authorization vulnerability in netopsae Accessibility by AudioEye accessibility-by-audioeye allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility by AudioEye: from n/a through = 1.0.49...

4.3CVSS0.0022EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/16 9:15 a.m.•13 views

CVE-2025-64243

Missing Authorization vulnerability in e-plugins Directory Pro directory-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directory Pro: from n/a through = 2.5.6...

4.3CVSS0.0022EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/16 8:12 a.m.•24 views

CVE-2025-66129

CVE-2025-66129 refers to a WordPress plugin issue in the Pochipp plugin (<= 1.18.0) described as a Missing Authorization / Broken Access Control vulnerability. The underlying problem is an improperly configured access control security level that could enable unauthorized actions. Public source...

5.3CVSS6AI score0.00254EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/16 8:12 a.m.•39 views

CVE-2025-64247

CVE-2025-64247 describes a Missing Authorization vulnerability in the WordPress plugin Read More & Accordion (Expand-maker). The Initial description states impact via unauthorized access due to misconfigured access controls, affecting Read More & Accordion: from n/a through

4.3CVSS6AI score0.0022EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/16 12:00 a.m.•10 views

CVE-2025-64639: Missing Authorization

Missing Authorization vulnerability in WP Compress WP Compress for MainWP wp-compress-mainwp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Compress for MainWP: from n/a through = 6.50.17...

5.3CVSS6AI score0.0032EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/16 12:00 a.m.•28 views

PT-2025-51421

Name of the Vulnerable Software and Affected Versions WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions through 4.0.7 Description An authorization issue exists in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent. The issue involves incorrectly configured...

5.3CVSS6.4AI score0.00254EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/12/16 12:00 a.m.•19 views

PT-2025-51396

Name of the Vulnerable Software and Affected Versions emarket-design versions through 2.5.3 Description An authorization issue exists in the Request a Quote functionality of emarket-design. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized...

4.3CVSS6.5AI score0.0022EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/12/16 12:00 a.m.•24 views

PT-2025-51411

Name of the Vulnerable Software and Affected Versions Design Stylish Price List versions through 7.2.2 Description An issue exists in Design Stylish Price List related to incorrectly configured access control security levels, allowing for missing authorization. The issue allows exploitation of...

5.4CVSS5.9AI score0.00379EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/12/16 12:00 a.m.•28 views

PT-2025-51381

Name of the Vulnerable Software and Affected Versions CreativeMindsSolutions CM On Demand Search And Replace versions through 1.5.4 Description An authorization issue exists in CreativeMindsSolutions CM On Demand Search And Replace, allowing exploitation due to incorrectly configured access contr...

4.3CVSS6.6AI score0.0022EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/16 12:00 a.m.•7 views

CVE-2025-64243: Missing Authorization

Missing Authorization vulnerability in e-plugins Directory Pro directory-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directory Pro: from n/a through = 2.5.6...

4.3CVSS5.9AI score0.0022EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/16 12:00 a.m.•5 views

CVE-2025-64242: Missing Authorization

Missing Authorization vulnerability in Merv Barrett Easy Property Listings easy-property-listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Property Listings: from n/a through = 3.5.22...

4.3CVSS5.9AI score0.0022EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/16 12:00 a.m.•8 views

CVE-2025-64247: Missing Authorization

Missing Authorization vulnerability in edmon.parker Read More & Accordion expand-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Read More & Accordion: from n/a through = 3.5.5.1...

4.3CVSS6AI score0.0022EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/16 12:00 a.m.•5 views

CVE-2025-68086: Missing Authorization

Missing Authorization vulnerability in merkulove Reformer for Elementor reformer-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Reformer for Elementor: from n/a through = 1.0.6...

5.4CVSS5.9AI score0.00164EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/16 12:00 a.m.•5 views

CVE-2025-68071: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in g5theme Essential Real Estate essential-real-estate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Real Estate: from n/a through = 5.3.2...

6.5CVSS6AI score0.00253EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/16 12:00 a.m.•3 views

CVE-2025-64635: Missing Authorization

Missing Authorization vulnerability in Syed Balkhi Feeds for YouTube feeds-for-youtube allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Feeds for YouTube: from n/a through = 2.4.0...

5.3CVSS6AI score0.00254EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/16 12:00 a.m.•4 views

CVE-2025-64251: Missing Authorization

Missing Authorization vulnerability in azzaroco Ultimate Learning Pro indeed-learning-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Learning Pro: from n/a through = 3.9.3...

4.9CVSS6AI score0.00279EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/16 12:00 a.m.•3 views

CVE-2025-66165: Missing Authorization

Missing Authorization vulnerability in merkulove Lottier for WPBakery lottier-wpbakery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lottier for WPBakery: from n/a through = 1.1.7...

5.4CVSS6AI score0.00199EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/16 12:00 a.m.•5 views

CVE-2025-64630: Missing Authorization

Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business Directory: from n/a through = 6.4.19...

4.9CVSS6AI score0.00341EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/16 12:00 a.m.•8 views

CVE-2025-68085: Missing Authorization

Missing Authorization vulnerability in merkulove Buttoner for Elementor buttoner-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Buttoner for Elementor: from n/a through = 1.0.6...

5.4CVSS5.9AI score0.00164EPSS
SaveExploits0References1
Rows per page
Query Builder