CVE-2025-22543

CVE-2025-22543 is a Missing Authorization vulnerability affecting the WordPress plugin/theme combo ST Gallery WP. Red Hat’s entry and the Wordfence vulnerability report describe an issue where access control is incorrectly configured, enabling unauthorized actions by authenticated users to modify...

WordPress ST Gallery WP plugin <= 1.0.8 - Settings Change vulnerability

Settings Change vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin ST Gallery WP versions = 1.0.8...

CVE-2023-47689 WordPress Animator plugin <= 3.0.10 - Unauthenticated Plugin Settings Change Vulnerability

Missing Authorization vulnerability in Toast Plugins Animator scroll-triggered-animations allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Animator: from n/a through = 3.0.10...

CVE-2024-55995 WordPress Torod plugin <= 1.7 - Settings Change vulnerability

Missing Authorization vulnerability in Torod Holding LTD Torod allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Torod: from n/a through 1.7...

CVE-2024-55995

The CVE-2024-55995 entry documents a Missing Authorization flaw in Torod (WordPress plugin) caused by incorrectly configured access control levels, enabling unauthorized access via misconfigured plugin settings. Affected products/versions: Torod versions n/a through 1.7. Impact per sources: unaut...

CVE-2024-54381 WordPress Advance Menu Manager plugin <= 3.1.1 - Settings Change vulnerability

Missing Authorization vulnerability in theDotstore Advance Menu Manager.This issue affects Advance Menu Manager: from n/a through 3.1.1...

CVE-2024-54381 WordPress Advance Menu Manager plugin <= 3.1.1 - Settings Change vulnerability

Missing Authorization vulnerability in Dotstore Advance Menu Manager advance-menu-manager.This issue affects Advance Menu Manager: from n/a through = 3.1.1...

WordPress 12 Step Meeting List plugin <= 3.16.5 - Settings Change vulnerability

Settings Change vulnerability discovered by Mika in WordPress Plugin 12 Step Meeting List versions = 3.16.5...

CVE-2024-55997 WordPress Order Delivery & Pickup Location Date Time plugin <= 1.1.0 - Settings Change vulnerability

Missing Authorization vulnerability in webchunky Order Delivery & Pickup Location Date Time order-delivery-pickup-location-date-time-free-version allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Delivery & Pickup Location Date Time: from n/a through...

CVE-2024-55997 WordPress Order Delivery & Pickup Location Date Time plugin <= 1.1.0 - Settings Change vulnerability

Missing Authorization vulnerability in Web Chunky Order Delivery & Pickup Location Date Time allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Delivery & Pickup Location Date Time: from n/a through 1.1.0...

CVE-2024-55997

CVE-2024-55997 (Order Delivery & Pickup Location Date Time Free Version) shows a Missing Authorization vulnerability in the WordPress plugin, allowing unauthenticated updates to plugin settings. Affected software: Order Delivery & Pickup Location Date Time (Free Version) up to version 1.1.0. CVSS...

WordPress Instantio plugin <= 3.3.7 - Settings Change vulnerability

Settings Change vulnerability discovered by Mika in WordPress Plugin Instantio versions = 3.3.7...

CVE-2024-56005 WordPress Posti Shipping Plugin <= 3.10.3 - CSRF to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in Posti Posti Shipping posti-shipping allows Cross Site Request Forgery.This issue affects Posti Shipping: from n/a through = 3.10.3...

CVE-2024-56005

CVE-2024-56005 is a CSRF-type vulnerability affecting Posti Shipping (WordPress plugin) up to version 3.10.3. The issue allows cross-site request forgery to change plugin settings. If exploited, an attacker could trigger settings changes without authentication or user interaction. The CVE has a C...

CVE-2024-54408 WordPress Youtube Video Grid plugin <= 1.9 - CSRF to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jake H. Youtube Video Grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Youtube Video Grid: from n/a through 1.9...

CVE-2024-54408 WordPress Youtube Video Grid plugin <= 1.9 - CSRF to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in codehandling Youtube Video Grid youmax-channel-embeds-for-youtube-businesses allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Youtube Video Grid: from n/a through = 1.9...

CVE-2024-54408

CVE-2024-54408 affects Youmax Channel Embeds for YouTube Businesses (Youtube Video Grid) via Cross-Site Request Forgery. Public details show a CSRF vulnerability caused by incorrectly configured access control, enabling settings changes via CSRF for Youtube Video Grid: from n/a through

CVE-2024-55998 WordPress Popup Surveys & Polls for WordPress (Mare.io) plugin <= 1.36 - Settings Change vulnerability

Missing Authorization vulnerability in Eric Sloan Popup Surveys & Polls for WordPress Mare.io popup-surveys allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup Surveys & Polls for WordPress Mare.io: from n/a through = 1.36...

CVE-2024-55998 WordPress Popup Surveys & Polls for WordPress (Mare.io) plugin <= 1.36 - Settings Change vulnerability

Missing Authorization vulnerability in dusthazard Popup Surveys & Polls for WordPress Mare.io allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup Surveys & Polls for WordPress Mare.io: from n/a through 1.36...

CVE-2024-56004

CVE-2024-56004 is a Missing Authorization vulnerability in the Easy Site Importer WordPress plugin (versions up to 1.0.1). It allows authenticated users (Subscriber+) to modify plugin settings due to insufficient access control. Connected sources confirm the issue and indicate no public patch det...