3181 matches found
CVE-2025-64244
Missing Authorization vulnerability in Codexpert, Inc Restrict Elementor Widgets, Columns and Sections restrict-elementor-widgets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restrict Elementor Widgets, Columns and Sections: from n/a through = 1.12...
CVE-2025-64243
Missing Authorization vulnerability in e-plugins Directory Pro directory-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directory Pro: from n/a through = 2.5.6...
CVE-2025-66129
CVE-2025-66129 refers to a WordPress plugin issue in the Pochipp plugin (<= 1.18.0) described as a Missing Authorization / Broken Access Control vulnerability. The underlying problem is an improperly configured access control security level that could enable unauthorized actions. Public source...
CVE-2025-64247
CVE-2025-64247 describes a Missing Authorization vulnerability in the WordPress plugin Read More & Accordion (Expand-maker). The Initial description states impact via unauthorized access due to misconfigured access controls, affecting Read More & Accordion: from n/a through
PT-2025-51421
Name of the Vulnerable Software and Affected Versions WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions through 4.0.7 Description An authorization issue exists in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent. The issue involves incorrectly configured...
PT-2025-51395
Name of the Vulnerable Software and Affected Versions edmon.parker Read More & Accordion versions through 3.5.4.1 Description An authorization issue exists in edmon.parker Read More & Accordion expand-maker, allowing exploitation of incorrectly configured access control security levels...
PT-2025-51411
Name of the Vulnerable Software and Affected Versions Design Stylish Price List versions through 7.2.2 Description An issue exists in Design Stylish Price List related to incorrectly configured access control security levels, allowing for missing authorization. The issue allows exploitation of...
PT-2025-51432
Name of the Vulnerable Software and Affected Versions TI WooCommerce Wishlist versions through 2.10.0 Description An authorization issue exists in templateinvaders TI WooCommerce Wishlist, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update T...
PT-2025-51423
Name of the Vulnerable Software and Affected Versions Coder for Elementor versions through 1.0.13 Description An issue exists in Coder for Elementor that relates to incorrectly configured access control security levels, potentially allowing unauthorized access. The vulnerability involves a missin...
PT-2025-51425
Name of the Vulnerable Software and Affected Versions merkulove Spoter for Elementor versions through 1.04 Description An issue exists in merkulove Spoter for Elementor related to incorrectly configured access control security levels, potentially allowing unauthorized access. The issue involves a...
PT-2025-51381
Name of the Vulnerable Software and Affected Versions CreativeMindsSolutions CM On Demand Search And Replace versions through 1.5.4 Description An authorization issue exists in CreativeMindsSolutions CM On Demand Search And Replace, allowing exploitation due to incorrectly configured access contr...
PT-2025-51430
Name of the Vulnerable Software and Affected Versions merkulove Lottier versions through 1.1.1 Description An authorization issue exists in merkulove Lottier lottier-gutenberg, allowing exploitation of incorrectly configured access control security levels. Recommendations Update to a version late...
PT-2025-51396
Name of the Vulnerable Software and Affected Versions emarket-design versions through 2.5.3 Description An authorization issue exists in the Request a Quote functionality of emarket-design. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized...
CVE-2022-47425
Missing Authorization vulnerability in Repute Infosystems ARMember allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ARMember: from n/a through 3.4.10...
CVE-2025-63065
Authorization Bypass Through User-Controlled Key vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Media LIbrary Assistant: from n/a through = 3.29...
CVE-2025-63025
Missing Authorization vulnerability in Xagio SEO Xagio SEO xagio-seo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Xagio SEO: from n/a through = 7.1.0.37...
CVE-2025-63008
Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP ERP: from n/a through = 1.16.7...
CVE-2025-62740
Missing Authorization vulnerability in Mario Peshev WP-CRM System wp-crm-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-CRM System: from n/a through = 3.4.6...
CVE-2025-64257
Missing Authorization vulnerability in Joe Dolson My Tickets my-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Tickets: from n/a through = 2.1.0...
EUVD-2025-202075
Missing Authorization vulnerability in WPFunnels WPFunnels wpfunnels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPFunnels: from n/a through = 3.6.2...