Lucene search
+L

3928 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/17 12:00 a.m.•7 views

CVE-2025-39559: Missing Authorization

Missing Authorization vulnerability in Eivin Landa Bring Fraktguiden for WooCommerce bring-fraktguiden-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bring Fraktguiden for WooCommerce: from n/a through = 1.11.4...

6.5CVSS5.9AI score0.0032EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•14 views

PT-2025-17028 · Unknown · Fadi Med Editor Wysiwyg Background Color

Name of the Vulnerable Software and Affected Versions: FADI MED Editor Wysiwyg Background Color versions 1.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For...

6.5CVSS9.2AI score0.00377EPSS
SaveExploits0References3
NVD
NVD
•added 2025/04/16 1:15 p.m.•36 views

CVE-2025-39591

Missing Authorization vulnerability in WP Shuffle WP Subscription Forms wp-subscription-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Subscription Forms: from n/a through = 1.2.3...

5.4CVSS0.00387EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/16 1:15 p.m.•26 views

CVE-2025-39571

Missing Authorization vulnerability in WPXPO WowStore product-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WowStore: from n/a through = 4.2.4...

4.3CVSS0.00422EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/16 1:15 p.m.•17 views

CVE-2025-39560

Missing Authorization vulnerability in Shahjada Live Forms liveforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Live Forms: from n/a through = 4.8.4...

5.4CVSS0.00439EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/16 1:15 p.m.•15 views

CVE-2025-39522

Missing Authorization vulnerability in Service2Client LLC Dynamic Post dynamic-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dynamic Post: from n/a through = 5.03...

5.4CVSS0.00439EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/16 12:44 p.m.•30 views

CVE-2025-39545 WordPress REST API Authentication plugin <= 3.6.3 - Settings Change Vulnerability

Missing Authorization vulnerability in miniOrange WordPress REST API Authentication wp-rest-api-authentication allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress REST API Authentication: from n/a through = 3.6.3...

5.4CVSS0.00508EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/16 12:44 p.m.•69 views

CVE-2025-39552

CVE-2025-39552 relates to a Missing Authorization vulnerability in Zephyr Project Manager. Public details in the connected sources consistently identify the affected product as Zephyr Project Manager and the issue as an access-control misconfiguration that permits exploitation of improperly confi...

5.4CVSS7.2AI score0.00352EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/16 12:44 p.m.•78 views

CVE-2025-39571

CVE-2025-39571 concerns WordPress WowStore (WooCommerce Builder & Gutenberg WooCommerce Blocks) up to version 4.2.4. The flaw is a Missing Authorization/Broken Access Control that allows exploitation of incorrectly configured access control security levels. Public sources confirm the affected pro...

4.3CVSS7.2AI score0.00422EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/16 12:00 a.m.•4 views

CVE-2025-39560: Missing Authorization

Missing Authorization vulnerability in Shahjada Live Forms liveforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Live Forms: from n/a through = 4.8.4...

5.4CVSS5.9AI score0.00439EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/16 12:00 a.m.•5 views

CVE-2025-39522: Missing Authorization

Missing Authorization vulnerability in Service2Client LLC Dynamic Post dynamic-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dynamic Post: from n/a through = 5.03...

5.4CVSS5.9AI score0.00439EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/15 12:15 p.m.•36 views

CVE-2025-26955

Missing Authorization vulnerability in vowelweb Industrial Lite industrial-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Industrial Lite: from n/a through = 1.0.8...

4.3CVSS0.00338EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/15 11:59 a.m.•74 views

CVE-2025-26955

CVE-2025-26955 is a Missing Authorization vulnerability in VW Themes Industrial Lite (affected: Industrial Lite

4.3CVSS6.7AI score0.00338EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/15 11:58 a.m.•39 views

CVE-2025-32929 WordPress Barcode Generator for WooCommerce plugin <= 2.0.4 - Arbitrary Content Deletion vulnerability

Missing Authorization vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Generator for WooCommerce embedding-barcodes-into-product-pages-and-orders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Barcode Generator for WooCommerce: from n/a through ...

7.5CVSS0.00379EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/15 12:00 a.m.•4 views

CVE-2025-32929: Missing Authorization

Missing Authorization vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Generator for WooCommerce embedding-barcodes-into-product-pages-and-orders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Barcode Generator for WooCommerce: from n/a through ...

7.5CVSS5.9AI score0.00379EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/15 12:00 a.m.•5 views

CVE-2025-26955: Missing Authorization

Missing Authorization vulnerability in vowelweb Industrial Lite industrial-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Industrial Lite: from n/a through = 1.0.8...

4.3CVSS5.6AI score0.00338EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/13 8:56 a.m.•14 views

CVE-2025-31041

Missing Authorization vulnerability in AnyTrack AnyTrack Affiliate Link Manager anytrack-affiliate-link-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AnyTrack Affiliate Link Manager: from n/a through = 1.0.4...

7.5CVSS7.2AI score0.00573EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/12 9:08 a.m.•30 views

CVE-2025-32221

Missing Authorization vulnerability in Spider Themes EazyDocs eazydocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EazyDocs: from n/a through = 2.7.1...

5.4CVSS7.2AI score0.00276EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/12 9:08 a.m.•32 views

CVE-2025-32212

Missing Authorization vulnerability in Specia Theme Specia Companion specia-companion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Specia Companion: from n/a through = 6.3...

6.5CVSS7.2AI score0.00283EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/12 8:55 a.m.•32 views

CVE-2025-32213

Missing Authorization vulnerability in flothemesplugins Flo Forms flo-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flo Forms: from n/a through = 1.0.43...

6.5CVSS7.2AI score0.00326EPSS
SaveExploits0References1
Rows per page
Query Builder