CVE-2025-31816 WordPress Mobile App Canvas Plugin <= 3.8.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in pietro Mobile App Canvas mobile-app allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mobile App Canvas: from n/a through = 3.8.2...

CVE-2025-31816

Technical details for CVE-2025-31816 are not provided in the supplied documents. Monitor for updates from vendor advisories and trusted feeds.

CVE-2025-31802 WordPress Shiptimize for WooCommerce plugin <= 3.1.86 - Settings Change vulnerability

Missing Authorization vulnerability in Shiptimize Shiptimize for WooCommerce shiptimize-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shiptimize for WooCommerce: from n/a through = 3.1.86...

CVE-2025-31798 WordPress Publitio Plugin <= 2.1.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in publitio Publitio publitio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Publitio: from n/a through = 2.1.8...

CVE-2025-31799 WordPress Publitio plugin <= 2.1.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in publitio Publitio allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Publitio: from n/a through 2.1.8...

CVE-2025-31791

Technical details for CVE-2025-31791 are not provided in the connected documents. No specifics on affected versions, root cause, impact, or fixes are disclosed here; monitor official advisories for updates.

CVE-2025-31786 WordPress Simple Icons plugin <= 2.8.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Travis Simple Icons simple-icons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Icons: from n/a through = 2.8.4...

CVE-2025-31782

Technical details for CVE-2025-31782 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories; no exploit, impact, or remediation information is present in the provided materials.

CVE-2025-31782 WordPress mb.YTPlayer plugin <= 3.3.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in pupunzi mb.YTPlayer wpmbytplayer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects mb.YTPlayer: from n/a through = 3.3.8...

CVE-2025-31781 WordPress Gift Cards for WooCommerce plugin <= 1.5.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in ahmadshyk Gift Cards for WooCommerce woo-giftcards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gift Cards for WooCommerce: from n/a through = 1.5.8...

CVE-2025-31780

CVE-2025-31780 is a Missing Authorization vulnerability in the WordPress plugin Append Content, exposing risk due to misconfigured access control. Affected range: from n/a to 2.1.1. CVSS v3.1 base score 6.5 (Network attack, Low/None for confidentiality, Availability; I: Low, A: Low). No exploit d...

CVE-2025-31777 WordPress Clockinator Lite plugin <= 1.0.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in BeastThemes Clockinator Lite allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Clockinator Lite: from n/a through 1.0.7...

CVE-2025-31777

CVE-2025-31777 concerns Clockinator Lite (BeastThemes) with Missing Authorization affecting Clockinator Lite versions up to 1.0.7. The Wordfence vulnerability entry in the connected docs confirms the affected software and the Missing Authorization issue, but detailed root-cause, impacted configur...

CVE-2025-31755 WordPress pCloud Backup plugin <= 1.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in josselynj pCloud Backup pcloud-backup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects pCloud Backup: from n/a through = 1.0.1...

CVE-2025-31752

CVE-2025-31752: Missing Authorization in Bulk Fields Editor (WordPress plugin) may allow unauthorized access due to misconfigured access controls. Affected: Bulk Fields Editor versions up to 1.8.0 (listed as vulnerable from n/a to 1.8.0). CVSS 3.1 base score 4.3 (Medium). No exploits, root-cause,...

CVE-2025-31408 WordPress Zoho Flow plugin <= 2.13.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Zoho Flow allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zoho Flow: from n/a through 2.13.3...

CVE-2025-31408 WordPress Zoho Flow plugin <= 2.13.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Zoho Flow Zoho Flow zoho-flow allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zoho Flow: from n/a through = 2.13.3...

CVE-2025-30797

Missing Authorization vulnerability in bigdrop.gr Greek Multi Tool – Fix peralinks, accents, auto create menus and more greek-multi-tool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Greek Multi Tool – Fix peralinks, accents, auto create menus and more...

CVE-2025-31415

Technical details about CVE-2025-31415 are not provided in the connected documents. The initial description notes a Missing Authorization issue in YayExtra up to v1.5.2, but there are no fix/version specifics or exploit details in the supplied materials.

CVE-2025-31415 WordPress YayExtra <= 1.5.2 - Broken Access Control Vulnerability

Missing Authorization vulnerability in YayCommerce YayExtra yayextra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YayExtra: from n/a through = 1.5.2...