CVE-2025-49246

CVE-2025-49246 describes a Missing Authorization vulnerability in the WordPress plugin "Testimonials Showcase" (cmoreira). The root cause is an incorrectly configured access control level that allows unauthorized access to restricted functionality. Affected version range is stated as from n/a thr...

CVE-2025-49240 WordPress DocsPress plugin <= 2.5.2 - Broken Access Control Vulnerability

Missing Authorization vulnerability in nK DocsPress docspress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DocsPress: from n/a through = 2.5.2...

CVE-2025-49241

CVE-2025-49241: Missing Authorization in the bobbingwide oik plugin (WordPress) allows bypass of access controls on versions up to 4.15.1. The issue is confirmed by Wordfence and Red Hat entries; remediation is to upgrade to oik 4.15.1 or later as documented by the sources.

CVE-2025-49241 WordPress oik <= 4.15.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in bobbingwide oik allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects oik: from n/a through 4.15.1...

CVE-2025-49241 WordPress oik plugin <= 4.15.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in bobbingwide oik oik allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects oik: from n/a through = 4.15.1...

PT-2025-24248 · Pickplugins · Pickplugins Job Board Manager

Name of the Vulnerable Software and Affected Versions: PickPlugins Job Board Manager versions 2.1.60 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For...

PT-2025-24113 · Unknown · Bbpress Api

Name of the Vulnerable Software and Affected Versions: bbPress API versions 1.0.0 through 1.0.14 Description: The issue is related to a Missing Authorization vulnerability in the Pascal Casier bbPress API, which allows exploiting incorrectly configured access control security levels...

PT-2025-24108 · Unknown · 6Storage Rentals

Name of the Vulnerable Software and Affected Versions: 6Storage Rentals versions n/a through 2.19.5 Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For versions n/a...

PT-2025-24089 · Cyberchimps · Cyberchimps Responsive Plus

Name of the Vulnerable Software and Affected Versions: CyberChimps Responsive Plus versions 3.2.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions...

PT-2025-24208 · Unknown · Cmoreira Testimonials Showcase

Name of the Vulnerable Software and Affected Versions: cmoreira Testimonials Showcase versions 1.9.16 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For version...

PT-2025-24145 · Unknown · Faaiq Custom Category/Post Type Post Order

Name of the Vulnerable Software and Affected Versions: faaiq Custom Category/Post Type Post order versions 1.5.9 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations:...

PT-2025-24146 · Wordlift · Wordlift

Name of the Vulnerable Software and Affected Versions: WordLift versions 3.54.4 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For WordLift versions 3.54.4 and...

PT-2025-24179 · Unknown · Onoffice For Wp-Websites

Name of the Vulnerable Software and Affected Versions: onOffice for WP-Websites versions n/a through 5.7 Description: The issue is related to a Missing Authorization vulnerability, allowing the exploitation of incorrectly configured access control security levels. Recommendations: For versions n/...

CVE-2025-48133

Missing Authorization vulnerability in Uncanny Owl Uncanny Automator uncanny-automator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Automator: from n/a through = 6.4.0.2...

CVE-2025-46258

Missing Authorization vulnerability in BdThemes Element Pack Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Element Pack Pro: from n/a before 8.0.0...

CVE-2025-46258 WordPress Element Pack Pro Plugin < 8.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in BdThemes Element Pack Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Element Pack Pro: from n/a before 8.0.0...

CVE-2025-48334

Missing Authorization vulnerability in BinaryCarpenter Woo Slider Pro woo-slider-pro-drag-drop-slider-builder-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Woo Slider Pro: from n/a through = 1.12...

CVE-2025-48275

Missing Authorization vulnerability in dastan800 Visual Header visual-header allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Visual Header: from n/a through = 1.3...

CVE-2025-39536

Missing Authorization vulnerability in Chimpstudio JobHunt Job Alerts allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JobHunt Job Alerts: from n/a through 3.6...

CVE-2025-48275

Missing Authorization vulnerability in dastan800 Visual Header visual-header allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Visual Header: from n/a through = 1.3...