3181 matches found
CVE-2025-47450
Missing Authorization vulnerability in Mitchell Bennis Simple File List simple-file-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple File List: from n/a through = 6.1.13...
CVE-2025-47692 WordPress ContentStudio plugin <= 1.3.5 - Broken Access Control Vulnerability
Missing Authorization vulnerability in contentstudio Contentstudio contentstudio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contentstudio: from n/a through = 1.3.5...
CVE-2025-47628
CVE-2025-47628 relates to the WordPress plugin QS Dark Mode (versions ≤ 3.0). The available documents describe a Missing Authorization/Broken Access Control vulnerability, allowing exploitation of improperly configured access control levels. No concrete exploit details, affected product/version r...
CVE-2025-47602 WordPress Calculate Prices based on Distance For WooCommerce plugin <= 1.3.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in ammarahmad786 Calculate Prices based on Distance For WooCommerce calculate-prices-based-on-distance-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Calculate Prices based on Distance For WooCommerce:...
CVE-2025-47591
CVE-2025-47591 affects the WordPress plugin CreedAlly Bulk Featured Image (Bulk Featured Image). It is a Missing Authorization vulnerability allowing access control misconfigurations, impacting versions up to 1.2.1 (some sources list vulnerability through 1.2.4). The CVSSv3.1 base score is 4.3 (N...
CVE-2025-47591 WordPress Bulk Featured Image plugin <= 1.2.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in CreedAlly Bulk Featured Image bulk-featured-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk Featured Image: from n/a through = 1.2.4...
CVE-2025-47526
CVE-2025-47526 concerns the WordPress plugin GS Variation Swatches for WooCommerce (versions up to 3.0.4). The issue is described as a Missing Authorization vulnerability, arising from incorrectly configured access control, which could allow an attacker to exploit insufficient authorization check...
CVE-2025-47485
CVE-2025-47485 affects Cozy Blocks (Cozy Blocks – Page Builder for Gutenberg & Site Editor) up to version 2.1.22. The root cause is Missing Authorization / broken access control allowing exploitation of incorrectly configured access levels. If exploited, this could enable unauthorized access to r...
CVE-2025-47469 WordPress Media Hygiene <= 4.0.0 - Broken Access Control Vulnerability
Missing Authorization vulnerability in slui Media Hygiene allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Hygiene: from n/a through 4.0.0...
CVE-2025-47469
CVE-2025-47469 describes a Missing Authorization / Broken Access Control vulnerability in the WordPress Media Hygiene plugin (versions
CVE-2025-47467 WordPress GS Testimonial Slider plugin <= 3.3.0 - Broken Access Control Vulnerability
Missing Authorization vulnerability in GS Plugins GS Testimonial Slider gs-testimonial allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GS Testimonial Slider: from n/a through = 3.3.0...
CVE-2025-47465
CVE-2025-47465 concerns the Blocksy WordPress theme (Creative Themes). A Missing Authorization vulnerability exists in Blocksy versions up to and including 2.0.97, allowing exploitation of incorrectly configured access control. Reported CVSS 3.1/3.1 metrics indicate a medium base score (4.9) with...
PT-2025-20096 · Blocksy · Blocksy
Name of the Vulnerable Software and Affected Versions: Blocksy versions 2.0.97 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Blocksy versions 2.0.97 and...
PT-2025-20102 · Unknown · Envo Extra
Name of the Vulnerable Software and Affected Versions: Envo Extra versions 1.9.9 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Envo Extra versions 1.9.9 an...
PT-2025-20168 · Unknown · Creedally Bulk Featured Image
Name of the Vulnerable Software and Affected Versions: CreedAlly Bulk Featured Image versions 1.2.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For CreedAlly...
PT-2025-20100 · Unknown · Slui Media Hygiene
Name of the Vulnerable Software and Affected Versions: slui Media Hygiene versions n/a through 4.0.0 Description: The issue is related to a Missing Authorization vulnerability in slui Media Hygiene, which allows exploiting incorrectly configured access control security levels. Recommendations: Fo...
PT-2025-20229 · Unknown · Advanced File Manager
Name of the Vulnerable Software and Affected Versions: Advanced File Manager versions through 5.3.1 Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For versions...
CVE-2025-46535
Missing Authorization vulnerability in AlphaEfficiencyTeam Custom Login and Registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Login and Registration: from n/a through 1.0.0...
CVE-2025-46470
Missing Authorization vulnerability in Peter Raschendorfer Smart Hashtags hashtagger hashtagger allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Hashtags hashtagger: from n/a through = 7.2.3...