WordPress Push Notification for Post and BuddyPress plugin <= 2.11 - Settings Change vulnerability

Settings Change vulnerability discovered by Mika in WordPress Plugin Push Notification for Post and BuddyPress versions = 2.11...

CVE-2025-22543

CVE-2025-22543 is a Missing Authorization vulnerability affecting the WordPress plugin/theme combo ST Gallery WP. Red Hat’s entry and the Wordfence vulnerability report describe an issue where access control is incorrectly configured, enabling unauthorized actions by authenticated users to modify...

CVE-2025-22543 WordPress ST Gallery WP plugin <= 1.0.8 - Settings Change vulnerability

Missing Authorization vulnerability in beautifultemplates ST Gallery WP st-gallery-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ST Gallery WP: from n/a through = 1.0.8...

WordPress ST Gallery WP plugin <= 1.0.8 - Settings Change vulnerability

Settings Change vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin ST Gallery WP versions = 1.0.8...

CVE-2023-47689 WordPress Animator plugin <= 3.0.10 - Unauthenticated Plugin Settings Change Vulnerability

Missing Authorization vulnerability in Toast Plugins Animator scroll-triggered-animations allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Animator: from n/a through = 3.0.10...

CVE-2024-55995

The CVE-2024-55995 entry documents a Missing Authorization flaw in Torod (WordPress plugin) caused by incorrectly configured access control levels, enabling unauthorized access via misconfigured plugin settings. Affected products/versions: Torod versions n/a through 1.7. Impact per sources: unaut...

CVE-2024-55995 WordPress Torod plugin <= 1.7 - Settings Change vulnerability

Missing Authorization vulnerability in Torod Holding LTD Torod allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Torod: from n/a through 1.7...

CVE-2024-54381 WordPress Advance Menu Manager plugin <= 3.1.1 - Settings Change vulnerability

Missing Authorization vulnerability in theDotstore Advance Menu Manager.This issue affects Advance Menu Manager: from n/a through 3.1.1...

CVE-2024-54381 WordPress Advance Menu Manager plugin <= 3.1.1 - Settings Change vulnerability

Missing Authorization vulnerability in Dotstore Advance Menu Manager advance-menu-manager.This issue affects Advance Menu Manager: from n/a through = 3.1.1...

WordPress 12 Step Meeting List plugin <= 3.16.5 - Settings Change vulnerability

Settings Change vulnerability discovered by Mika in WordPress Plugin 12 Step Meeting List versions = 3.16.5...

CVE-2024-55997 WordPress Order Delivery & Pickup Location Date Time plugin <= 1.1.0 - Settings Change vulnerability

Missing Authorization vulnerability in Web Chunky Order Delivery & Pickup Location Date Time allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Delivery & Pickup Location Date Time: from n/a through 1.1.0...

CVE-2024-55997

CVE-2024-55997 (Order Delivery & Pickup Location Date Time Free Version) shows a Missing Authorization vulnerability in the WordPress plugin, allowing unauthenticated updates to plugin settings. Affected software: Order Delivery & Pickup Location Date Time (Free Version) up to version 1.1.0. CVSS...

CVE-2024-55997 WordPress Order Delivery & Pickup Location Date Time plugin <= 1.1.0 - Settings Change vulnerability

Missing Authorization vulnerability in webchunky Order Delivery & Pickup Location Date Time order-delivery-pickup-location-date-time-free-version allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Delivery & Pickup Location Date Time: from n/a through...

WordPress Instantio plugin <= 3.3.7 - Settings Change vulnerability

Settings Change vulnerability discovered by Mika in WordPress Plugin Instantio versions = 3.3.7...

CVE-2024-56005 WordPress Posti Shipping Plugin <= 3.10.3 - CSRF to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in Posti Posti Shipping posti-shipping allows Cross Site Request Forgery.This issue affects Posti Shipping: from n/a through = 3.10.3...

CVE-2024-56005

CVE-2024-56005 is a CSRF-type vulnerability affecting Posti Shipping (WordPress plugin) up to version 3.10.3. The issue allows cross-site request forgery to change plugin settings. If exploited, an attacker could trigger settings changes without authentication or user interaction. The CVE has a C...

CVE-2024-54408 WordPress Youtube Video Grid plugin <= 1.9 - CSRF to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in codehandling Youtube Video Grid youmax-channel-embeds-for-youtube-businesses allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Youtube Video Grid: from n/a through = 1.9...

CVE-2024-54408

CVE-2024-54408 affects Youmax Channel Embeds for YouTube Businesses (Youtube Video Grid) via Cross-Site Request Forgery. Public details show a CSRF vulnerability caused by incorrectly configured access control, enabling settings changes via CSRF for Youtube Video Grid: from n/a through

CVE-2024-54408 WordPress Youtube Video Grid plugin <= 1.9 - CSRF to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jake H. Youtube Video Grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Youtube Video Grid: from n/a through 1.9...

CVE-2024-55998 WordPress Popup Surveys & Polls for WordPress (Mare.io) plugin <= 1.36 - Settings Change vulnerability

Missing Authorization vulnerability in Eric Sloan Popup Surveys & Polls for WordPress Mare.io popup-surveys allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup Surveys & Polls for WordPress Mare.io: from n/a through = 1.36...