CVE-2025-27356

Missing Authorization vulnerability in Hardik Sticky Header On Scroll sticky-header-on-scroll allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sticky Header On Scroll: from n/a through = 1.0...

CVE-2025-27294

Missing Authorization vulnerability in platcom WP-Asambleas wp-asambleas allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Asambleas: from n/a through = 2.85.0...

CVE-2025-26883

Missing Authorization vulnerability in bPlugins Animated Text Block animated-text-block allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Animated Text Block: from n/a through = 1.0.7...

CVE-2024-12917

Files or Directories Accessible to External Parties vulnerability in Agito Computer Health4All allows Exploiting Incorrectly Configured Access Control Security Levels, Authentication Abuse. This issue affects Health4All: before 10.01.2025...

CVE-2025-27356

CVE-2025-27356 is a Missing Authorization vulnerability affecting the WordPress plugin “Sticky Header On Scroll” versions up to 1.0, per Patchstack and CVE records. The underlying issue is broken access control/incorrectly configured access levels, which could allow unauthorized access or actions...

CVE-2025-26883 WordPress Animated Text Block plugin <= 1.0.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in bPlugins Animated Text Block animated-text-block allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Animated Text Block: from n/a through = 1.0.7...

CVE-2025-27294

CVE-2025-27294 affects the WordPress plugin WP-Asambleas, version

CVE-2025-26750

Missing Authorization vulnerability in appsbd Vitepos vitepos-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Vitepos: from n/a through = 3.1.3...

CVE-2025-26750

CVE-2025-26750 describes a Missing Authorization vulnerability in the WordPress Vitepos POS plugin (Vitepos-lite) for WooCommerce, affecting versions up to 3.1.3. The CVSS v3.1 base score is 6.5 (Network, Low Privileges, High Confidentiality impact; UI: none; I: none). No exploitation details are...

CVE-2025-26773 WordPress Analytify plugin <= 5.5.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Adnan Analytify wp-analytify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Analytify: from n/a through = 5.5.0...

CVE-2025-26765

Missing Authorization vulnerability in enituretechnology Distance Based Shipping Calculator distance-based-shipping-calculator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Distance Based Shipping Calculator: from n/a through = 2.0.22...

CVE-2025-26765

The CVE-2025-26765 entry concerns a missing/broken authorization vulnerability in the WordPress Distance Based Shipping Calculator plugin (versions up to 2.0.22). Affected component is the access-control level configuration, enabling unauthorized actions. Public sources (Patchstack and CVE record...

CVE-2025-22289

CVE-2025-22289 affects WordPress plugin LTL Freight Quotes – Unishippers Edition (

CVE-2025-24607

Missing Authorization vulnerability in Northern Beaches Websites IdeaPush ideapush allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IdeaPush: from n/a through = 8.71...

CVE-2024-52500

Missing Authorization vulnerability in monetagwp Monetag Official Plugin monetag-official allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Monetag Official Plugin: from n/a through = 1.1.3...

CVE-2025-24607

Missing Authorization vulnerability in Northern Beaches Websites IdeaPush ideapush allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IdeaPush: from n/a through = 8.71...

CVE-2025-23771

Missing Authorization vulnerability in Murali Push Notification for Post and BuddyPress push-notification-for-post-and-buddypress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Push Notification for Post and BuddyPress: from n/a through = 2.11...

CVE-2025-22698 WordPress Accessibility Suite by Ability, Inc plugin <= 4.18 - Multiple Broken Access Control vulnerability

Missing Authorization vulnerability in Ability, Inc Accessibility Suite online-accessibility allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Suite: from n/a through = 4.18...

CVE-2025-24692 WordPress Bulk Menu Edit plugin <= 1.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in M.Code Bulk Menu Edit bulk-menu-edit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk Menu Edit: from n/a through = 1.3...

CVE-2025-24607 WordPress IdeaPush plugin <= 8.71 - Broken Access Control vulnerability

Missing Authorization vulnerability in Northern Beaches Websites IdeaPush ideapush allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IdeaPush: from n/a through = 8.71...