3181 matches found
CVE-2025-49874 WordPress Arconix FAQ plugin <= 1.9.6 - Broken Access Control Vulnerability
Missing Authorization vulnerability in tychesoftwares Arconix FAQ arconix-faq allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Arconix FAQ: from n/a through = 1.9.6...
CVE-2025-49874
Summary: CVE-2025-49874 concerns a Missing Authorization vulnerability in the WordPress plugin Arconix FAQ (versions
CVE-2025-49880
Summary: CVE-2025-49880 affects WordPress CubeWP Forms (versions up to 1.1.5) with a missing authorization flaw enabling attackers to exploit misconfigured access controls. The vulnerability originates from inadequate access control checks in CubeWP Forms and is cataloged with a CVSS v3.1 base sc...
PT-2025-25692 · WordPress · Wp Dummy Content Generator
Name of the Vulnerable Software and Affected Versions: WP Dummy Content Generator versions 3.4.6 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For WP Dumm...
CVE-2025-49509
Missing Authorization vulnerability in Roland Beaussant Audio Editor & Recorder audio-editor-recorder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Audio Editor & Recorder: from n/a through = 2.2.1...
CVE-2025-48147
Missing Authorization vulnerability in Crypto Cloud CryptoCloud - Crypto Payment Gateway cryptocloud-crypto-payment-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CryptoCloud - Crypto Payment Gateway: from n/a through = 2.1.2...
CVE-2025-32308
CVE-2025-32308 concerns Team Builder — Meet The Team WordPress Plugin. The issue is described as a Missing Authorization vulnerability caused by incorrectly configured access control security levels, enabling bypass of authorization checks. The vulnerability affects versions from n/a up to 1.5.7 ...
CVE-2025-47527
CVE-2025-47527: Missing Authorization vulnerability in Icegram Icegram Collect – Easy Form, Lead Collection and Subscription plugin is present in Icegram Collect versions up to 1.3.18. The Red Hat advisory describes the issue as an Incorrectly Configured Access Control/ Missing Authorization vuln...
CVE-2025-47527 WordPress Icegram Collect – Easy Form, Lead Collection and Subscription plugin <= 1.3.18 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Icegram Icegram Collect icegram-rainmaker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Icegram Collect: from n/a through = 1.3.18...
CVE-2025-48147
CVE-2025-48147 corresponds to a Missing/Broken Access Control in the WordPress plugin CryptoCloud – Crypto Payment Gateway (cryptocloud-crypto-payment-gateway) up to version 2.1.2. The root cause is incorrectly configured access control security levels, enabling unauthorized access to privileged ...
PT-2025-24494 · Unknown · Looks Awesome Team Builder
Name of the Vulnerable Software and Affected Versions: looks awesome Team Builder versions 1.5.7 and earlier Description: The issue is related to a Missing Authorization vulnerability in looks awesome Team Builder, which allows exploiting incorrectly configured access control security levels...
CVE-2023-25997
Missing Authorization vulnerability in SolaPlugins Sola Support Ticket allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Sola Support Ticket: from n/a through 3.17...
CVE-2025-30990
Missing Authorization vulnerability in ThemeHunk ThemeHunk themehunk-megamenu-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ThemeHunk: from n/a through = 1.2.0...
CVE-2025-30957
Missing Authorization vulnerability in BuddyDev Activity Plus Reloaded for BuddyPress bp-activity-plus-reloaded allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Activity Plus Reloaded for BuddyPress: from n/a through = 1.1.2...
CVE-2025-30624
Missing Authorization vulnerability in WordLift WordLift wordlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordLift: from n/a through = 3.54.4...
CVE-2025-30974
Missing Authorization vulnerability in Akhtarujjaman Shuvo Post Grid Master ajax-filter-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid Master: from n/a through = 3.4.17...
CVE-2025-30927
Missing Authorization vulnerability in Wordapp Team Wordapp wordapp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wordapp: from n/a through = 1.7.0...
CVE-2025-23971
Missing Authorization vulnerability in whassan KI Live Video Conferences ki-live-video-conferences allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects KI Live Video Conferences: from n/a through = 5.5.15...
CVE-2025-49324
Missing Authorization vulnerability in PickPlugins Job Board Manager job-board-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Job Board Manager: from n/a through = 2.1.60...