CVE-2025-22686 WordPress CF7 Google Sheets Connector plugin <= 5.0.17 - Broken Access Control vulnerability

Missing Authorization vulnerability in GSheetConnector CF7 Google Sheets Connector allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects CF7 Google Sheets Connector: from n/a through 5.0.17...

CVE-2025-22681

CVE-2025-22681 describes a Missing Authorization vulnerability in the WordPress Content Cloner plugin, affected versions

CVE-2025-22681 WordPress Content Cloner plugin <= 1.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Xfinitysoft Content Cloner super-seo-content-cloner allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Content Cloner: from n/a through = 1.0.1...

CVE-2025-22720

Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Manager: from n/a through = 2.2.1...

CVE-2025-24653

Missing Authorization vulnerability in NotFound Admin and Site Enhancements ASE Pro allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Admin and Site Enhancements ASE Pro: from n/a through 7.6.1.1...

CVE-2025-24662 WordPress LearnDash LMS Plugin <= 4.20.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in LearnDash LearnDash LMS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnDash LMS: from n/a through 4.20.0.1...

CVE-2025-24662 WordPress LearnDash LMS Plugin <= 4.20.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in LearnDash LearnDash LMS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnDash LMS: from n/a through 4.20.0.1...

CVE-2025-24662

CVE-2025-24662 is a Missing Authorization (Broken Access Control) vulnerability in LearnDash LMS. Public sources describe that the issue allows exploitation of incorrectly configured access control security levels and affects LearnDash LMS versions up to 4.20.0.1. Reports from NVD/Red Hat identif...

CVE-2025-24590

CVE-2025-24590 affects the WordPress plugin picu – Online Photo Proofing Gallery (versions up to 2.4.0). The issue is a Missing Authorization / broken access control vulnerability allowing exploitation of access control configuration. CVSS v3.1 base score 5.3 (Network, Low Confidentiality impact,...

CVE-2025-23849

CVE-2025-23849 concerns the PAPERCITE WordPress plugin (versions up to 0.5.18) with a Missing Authorization vulnerability arising from incorrectly configured access control levels. The Red Hat/NVD entries reiterate the issue and impact was not detailed beyond “Missing Authorization.” Potential im...

CVE-2025-23849 WordPress PAPERCITE plugin <= 0.5.18 - Broken Access Control vulnerability

Missing Authorization vulnerability in bpiwowar PAPERCITE papercite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PAPERCITE: from n/a through = 0.5.18...

CVE-2025-24584

CVE-2025-24584 is a Missing Authorization vulnerability in BdThemes Ultimate Store Kit Elementor Addons (affected: versions up to 2.3.0). The issue arises from incorrectly configured access control security levels, enabling unauthorized access to restricted areas. The CVSS v3.1 vector (AV:N/AC:L/...

CVE-2025-24753

Missing Authorization vulnerability in StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenberg Blocks by Kadence Blocks: from n/a through = 3.3.1...

CVE-2025-24750

Missing Authorization vulnerability in Syed Balkhi ExactMetrics google-analytics-dashboard-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ExactMetrics: from n/a through = 8.1.0...

CVE-2025-24751

Missing Authorization vulnerability in GoDaddy CoBlocks coblocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CoBlocks: from n/a through = 3.1.13...

CVE-2025-24725

Missing Authorization vulnerability in ThimPress Thim Elementor Kit thim-elementor-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Thim Elementor Kit: from n/a through = 1.2.8...

CVE-2025-24691

Missing Authorization vulnerability in ctltwp People Lists people-lists allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects People Lists: from n/a through = 1.3.10...

CVE-2025-24693

Missing Authorization vulnerability in Yehi Advanced Notifications advanced-notifications allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Notifications: from n/a through = 1.2.7...

CVE-2025-24649

Missing Authorization vulnerability in Bowo Admin and Site Enhancements ASE admin-site-enhancements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Admin and Site Enhancements ASE: from n/a through = 7.6.2...

CVE-2025-24633

Missing Authorization vulnerability in silverplugins217 Build Private Store For Woocommerce build-private-store-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Build Private Store For Woocommerce: from n/a through = 1.0...