CVE-2025-28995

CVE-2025-28995 applies to Viral Loops WP Integration (WordPress plugin). The issue is described as a Missing Authorization vulnerability due to misconfigured access control levels, affecting Viral Loops WP Integration versions up to 3.8.1 (no fixed version specified in the provided documents). CV...

CVE-2025-28994

CVE-2025-28994 affects Viral Loops WP Integration (WordPress plugin) up to version 3.8.1 and is reported as a Missing Authorization vulnerability (bypass of access control). The available connected sources provide the issue and affected versions, but do not include exploit details. Public status ...

CVE-2025-28997

CVE-2025-28997 : WP AutoKeyword (WordPress plugin) is listed as missing authorization in versions up to 1.0, implying access-control misconfigurations as root cause. The connected records do not provide a patch version or remediation; no exploitation status is stated. Technical details beyond aff...

CVE-2025-29010

CVE-2025-29010 (Behance Portfolio Manager) is a Missing Authorization vulnerability in the Behance Portfolio Manager plugin for WordPress. Affected version range is from n/a through 1.7.4. The issue arises from incorrectly configured access control security levels, enabling unauthorized access. C...

CVE-2025-30624 WordPress WordLift plugin <= 3.54.4 - Broken Access Control Vulnerability

Missing Authorization vulnerability in WordLift WordLift wordlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordLift: from n/a through = 3.54.4...

CVE-2025-30636 WordPress Accessibility Suite plugin <= 4.19 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Ability, Inc Accessibility Suite online-accessibility allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Suite: from n/a through = 4.19...

CVE-2025-30927 WordPress Wordapp plugin <= 1.7.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Wordapp Team Wordapp wordapp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wordapp: from n/a through = 1.7.0...

CVE-2025-30932 WordPress WP Compress for MainWP plugin <= 6.30.32 - Broken Access Control Vulnerability

Missing Authorization vulnerability in WP Compress WP Compress for MainWP wp-compress-mainwp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Compress for MainWP: from n/a through = 6.30.32...

CVE-2025-30932 WordPress WP Compress for MainWP plugin <= 6.30.32 - Broken Access Control Vulnerability

Missing Authorization vulnerability in WP Compress WP Compress for MainWP wp-compress-mainwp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Compress for MainWP: from n/a through = 6.30.32...

CVE-2025-30974 WordPress Post Grid Master plugin <= 3.4.17 - Broken Access Control vulnerability

Missing Authorization vulnerability in Akhtarujjaman Shuvo Post Grid Master ajax-filter-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid Master: from n/a through = 3.4.17...

CVE-2025-30974

CVE-2025-30974 is a Missing Authorization vulnerability in the WordPress plugin Post Grid Master . The issue arises from incorrectly configured access control levels, enabling unauthorized users to exploit restricted actions. Affected versions are Post Grid Master

CVE-2025-30978 WordPress Slack Notifications by dorzki plugin <= 2.0.7 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Dor Zuberi Slack Notifications by dorzki dorzki-notifications-to-slack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Slack Notifications by dorzki: from n/a through = 2.0.7...

CVE-2025-30990 WordPress ThemeHunk plugin <= 1.2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeHunk ThemeHunk themehunk-megamenu-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ThemeHunk: from n/a through = 1.2.0...

CVE-2025-30990

CVE-2025-30990 pertains to ThemeHunk WordPress plugin where Missing Authorization arises from misconfigured access control in ThemeHunk, affecting versions up to 1.1.1. The vulnerability enables an unauthorized actor to exploit access control, per the Red Hat advisory describing Missing Authoriza...

CVE-2025-31000

CVE-2025-31000 is a Missing Authorization vulnerability in the Payment QR WooCommerce plugin for WordPress (affected: 1.0.0 to 1.1.6). Exploitation details in the provided docs indicate network-based access with no user interaction and no confidentiality impact, but no public patch is listed here...

CVE-2025-49289

CVE-2025-49289 is a Missing Authorization vulnerability in the PDF for WPForms (WordPress plugin) that affects the PDF for WPForms component up to version 5.5.0. The issue is rooted in improperly configured access control, allowing unauthorized users to access or manipulate PDF-related functional...

CVE-2025-49288 WordPress Ultimate WP Mail plugin <= 1.3.5 - Account Takeover via Email Log Leak Vulnerability

Missing Authorization vulnerability in Rustaurius Ultimate WP Mail ultimate-wp-mail allows Authentication Bypass.This issue affects Ultimate WP Mail: from n/a through = 1.3.5...

CVE-2025-49248

CVE-2025-49248 concerns a Missing Authorization issue in the Team Showcase WordPress plugin. The available data indicate an incorrect configuration of access control security levels, allowing actions that should be restricted. The CVSS vector in the initial data reports network access with low pr...

CVE-2025-49248 WordPress Team Showcase < 25.05.13 - Broken Access Control Vulnerability

Missing Authorization vulnerability in cmoreira Team Showcase allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Team Showcase: from n/a through n/a...

CVE-2025-49246 WordPress Testimonials Showcase plugin <= 1.9.16 - Broken Access Control Vulnerability

Missing Authorization vulnerability in cmoreira Testimonials Showcase testimonials-showcase allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Testimonials Showcase: from n/a through = 1.9.16...