CVE-2022-38141

Missing Authorization vulnerability in Zorem Sales Report Email for WooCommerce.This issue affects Sales Report Email for WooCommerce: from n/a through 2.8...

PT-2025-21712 · Eventon · Eventon

Name of the Vulnerable Software and Affected Versions: EventON versions n/a through 4.9.9 Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions n/a through 4.9.9, update to a...

CVE-2025-46232 WordPress Download Alt Text AI plugin <= 1.9.93 - Broken Access Control Vulnerability

Missing Authorization vulnerability in alttextai Download Alt Text AI alttext-ai allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download Alt Text AI: from n/a through = 1.9.93...

CVE-2025-24737 WordPress WP Helper Premium plugin <= 4.6.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mat Bao Corporation WP Helper Premium allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WP Helper Premium: from n/a through 4.6.1...

PT-2025-17023 · Unknown · Mingocommerce Delete All Posts

Name of the Vulnerable Software and Affected Versions: mingocommerce Delete All Posts versions n/a through 1.1.1 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions...

CVE-2025-32232

No technical details about CVE-2025-32232 are provided in the supplied documents; public details (affected product/version/patch) are not disclosed here. Monitor for updates from authoritative sources.

CVE-2025-31882

Technical details about CVE-2025-31882 are not provided in the supplied documents. No impacted versions, exploit steps, or remediation are described here; monitor for official disclosures or vendor advisories for updates.

CVE-2025-31830

CVE-2025-31830 is a Missing Authorization vulnerability in the plugin Printus – Automatic Printing Plugin for WooCommerce . The issue concerns Incorrectly Configured Access Control affecting Printus versions up to and including 1.2.6. The connected data lists the CVSS score as 4.3 (Network attack...

CVE-2025-30881 WordPress Big Store theme <= 2.0.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in themehunk Big Store big-store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Big Store: from n/a through = 2.0.8...

CVE-2023-41953

Missing Authorization vulnerability in ProfilePress Membership Team ProfilePress.This issue affects ProfilePress: from n/a through 4.13.1...

CVE-2023-23893 WordPress Simple Giveaways plugin <= 2.48.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Igor Benic Simple Giveaways giveasap allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Giveaways: from n/a through = 2.48.0...

PT-2024-30332 · Tutor Lms · Tutor Lms

Name of the Vulnerable Software and Affected Versions: Tutor LMS versions 2.7.3 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Tutor LMS versions 2.7.3 and...

CVE-2023-36504

CVE-2023-36504 affects WordPress plugin BBS e-Popup (vulnerable:

CVE-2024-3761

In lunary-ai/lunary, version 1.2.2 contains an unauthorized deletion vulnerability on the DELETE endpoint at packages/backend/src/api/v1/datasets due to missing authorization/authentication. This allows any user (no token required) to delete a dataset, potentially causing data loss or service dis...