VYPR

CVEs

410,290 total · page 1975 of 8,206

AllCriticalHighKEV
  • CVE-2025-66131MedDec 16, 2025
    WordPress
    Yaad Sarig Payment Gateway For Wc
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in yaadsarig Yaad Sarig Payment Gateway For WC yaad-sarig-payment-gateway-for-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Yaad Sarig Payment Gateway For WC: from n/a through <= 2.2.11.

  • CVE-2025-66130MedDec 16, 2025
    WordPress
    WP Views Counter
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in etruel WP Views Counter wpecounter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Views Counter: from n/a through <= 2.1.2.

  • CVE-2025-66129MedDec 16, 2025
    WordPress
    Pochipp
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in wppochipp Pochipp pochipp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pochipp: from n/a through <= 1.18.0.

  • CVE-2025-66128MedDec 16, 2025
    Brevo
    Sendinblue for WooCommerce
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in Brevo Sendinblue for WooCommerce woocommerce-sendinblue-newsletter-subscription allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sendinblue for WooCommerce: from n/a through <= 4.0.49.

  • CVE-2025-66127MedDec 16, 2025
    WordPress
    Essential Real Estate
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in g5theme Essential Real Estate essential-real-estate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Real Estate: from n/a through <= 5.3.2.

  • CVE-2025-66126MedDec 16, 2025
    WordPress
    Fix Media Library
    risk 0.34cvss 5.3epss 0.00

    Insertion of Sensitive Information Into Sent Data vulnerability in wowpress.host Fix Media Library wow-media-library-fix allows Retrieve Embedded Sensitive Data.This issue affects Fix Media Library: from n/a through <= 2.0.

  • CVE-2025-66125MedDec 16, 2025
    WordPress
    Ultimate Auction
    risk 0.34cvss 5.3epss 0.00

    Insertion of Sensitive Information Into Sent Data vulnerability in Nitesh Ultimate Auction ultimate-auction allows Retrieve Embedded Sensitive Data.This issue affects Ultimate Auction : from n/a through <= 4.3.3.

  • CVE-2025-66124MedDec 16, 2025
    WordPress
    Leaky Paywall
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in ZEEN101 Leaky Paywall leaky-paywall allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Leaky Paywall: from n/a through <= 4.22.6.

  • CVE-2025-66122MedDec 16, 2025
    WordPress
    Stylish Price List
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in Design Stylish Price List stylish-price-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stylish Price List: from n/a through <= 7.2.2.

  • CVE-2025-66121MedDec 16, 2025
    WordPress
    Siteground Security
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in SiteGround SiteGround Security sg-security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteGround Security: from n/a through <= 1.5.8.

  • CVE-2025-66120MedDec 16, 2025
    WordPress
    Catfolders
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in CatFolders CatFolders catfolders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CatFolders: from n/a through <= 2.5.3.

  • CVE-2025-64639MedDec 16, 2025
    WordPress
    Wp Compress Mainwp
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in WP Compress WP Compress for MainWP wp-compress-mainwp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Compress for MainWP: from n/a through <= 6.50.17.

  • CVE-2025-64638MedDec 16, 2025
    OnPay.io
    OnPay.io for WooCommerce
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in OnPay.io OnPay.io for WooCommerce onpay-io-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OnPay.io for WooCommerce: from n/a through <= 1.0.47.

  • CVE-2025-64635MedDec 16, 2025
    WordPress
    Feeds For Youtube
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in Syed Balkhi Feeds for YouTube feeds-for-youtube allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Feeds for YouTube: from n/a through <= 2.4.0.

  • CVE-2025-64634MedDec 16, 2025
    Theme Fusion
    Avada
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in ThemeFusion Avada avada allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Avada: from n/a through <= 7.13.2.

  • CVE-2025-64633MedDec 16, 2025
    WordPress
    Norebro Extra
    risk 0.34cvss 5.3epss 0.00

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in colabrio Norebro Extra norebro-extra allows Code Injection.This issue affects Norebro Extra: from n/a through <= 1.6.8.

  • CVE-2025-64632MedDec 16, 2025
    Auctollo
    Google XML Sitemaps
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in Auctollo Google XML Sitemaps google-sitemap-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Google XML Sitemaps: from n/a through <= 4.1.22.

  • CVE-2025-64631MedDec 16, 2025
    WordPress
    WCFM Marketplace
    risk 0.32cvss 4.9epss 0.00

    Missing Authorization vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCFM Marketplace: from n/a through <= 3.7.1.

  • CVE-2025-64630MedDec 16, 2025
    WordPress
    Cm Business Directory
    risk 0.32cvss 4.9epss 0.00

    Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business Directory: from n/a through <= 6.4.19.

  • CVE-2025-64253MedDec 16, 2025
    WordPress
    Health Check
    risk 0.32cvss 4.9epss 0.00

    Path Traversal: '.../...//' vulnerability in WordPress.org Health Check & Troubleshooting health-check allows Path Traversal.This issue affects Health Check & Troubleshooting: from n/a through <= 1.7.1.

  • CVE-2025-64251MedDec 16, 2025
    WordPress
    Ultimate Learning Pro
    risk 0.32cvss 4.9epss 0.00

    Missing Authorization vulnerability in azzaroco Ultimate Learning Pro indeed-learning-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Learning Pro: from n/a through <= 3.9.3.

  • CVE-2025-64250MedDec 16, 2025
    WordPress
    Directorist
    risk 0.31cvss 4.7epss 0.00

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wpWax Directorist directorist allows Phishing.This issue affects Directorist: from n/a through <= 8.6.6.

  • CVE-2025-64249MedDec 16, 2025
    WordPress
    Protect WP Admin
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in WP-EXPERTS.IN Protect WP Admin protect-wp-admin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Protect WP Admin: from n/a through <= 4.1.

  • CVE-2025-64248MedDec 16, 2025
    WordPress
    Request A Quote
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in emarket-design Request a Quote request-a-quote allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Request a Quote: from n/a through <= 2.5.3.

  • CVE-2025-64247MedDec 16, 2025
    WordPress
    Read More & Accordion
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in edmon.parker Read More & Accordion expand-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Read More & Accordion: from n/a through <= 3.5.5.1.

  • CVE-2025-64246MedDec 16, 2025
    WordPress
    Accessibility By Audioeye
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in netopsae Accessibility by AudioEye accessibility-by-audioeye allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility by AudioEye: from n/a through <= 1.0.49.

  • CVE-2025-64245MedDec 16, 2025
    WordPress
    Import External Attachments
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in ryanpcmcquen Import external attachments import-external-attachments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Import external attachments: from n/a through <= 1.5.12.

  • CVE-2025-64244MedDec 16, 2025
    Codexpert
    Restrict Elementor Widgets, Columns and Sections
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Codexpert, Inc Restrict Elementor Widgets, Columns and Sections restrict-elementor-widgets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restrict Elementor Widgets, Columns and Sections: from n/a…

  • CVE-2025-64243MedDec 16, 2025
    WordPress
    Directory Pro
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in e-plugins Directory Pro directory-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directory Pro: from n/a through <= 2.5.6.

  • CVE-2025-64242MedDec 16, 2025
    WordPress
    Easy Property Listings
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Merv Barrett Easy Property Listings easy-property-listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Property Listings: from n/a through <= 3.5.22.

  • CVE-2025-64241MedDec 16, 2025
    WordPress
    WP Coupons and Deals
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Imtiaz Rayhan WP Coupons and Deals wp-coupons-and-deals allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Coupons and Deals: from n/a through <= 3.2.4.

  • CVE-2025-64240MedDec 16, 2025
    WordPress
    Freshchat
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in freshchat Freshchat freshchat allows Cross Site Request Forgery.This issue affects Freshchat: from n/a through <= 2.3.4.

  • CVE-2025-64239MedDec 16, 2025
    WordPress
    Rtl Tester
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Yoav Farhi RTL Tester rtl-tester allows Cross Site Request Forgery.This issue affects RTL Tester: from n/a through <= 1.2.

  • CVE-2025-64238MedDec 16, 2025
    WordPress
    Wps Bidouille
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in NicolasKulka WPS Bidouille wps-bidouille allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPS Bidouille: from n/a through <= 1.33.1.

  • CVE-2025-64237MedDec 16, 2025
    WordPress
    Quick Interest Slider
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Graham Quick Interest Slider quick-interest-slider allows Cross Site Request Forgery.This issue affects Quick Interest Slider: from n/a through <= 3.1.5.

  • CVE-2025-59009MedDec 16, 2025
    WordPress
    Listify
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Astoundify Listify listify allows Cross Site Request Forgery.This issue affects Listify: from n/a through <= 3.2.5.

  • CVE-2025-59001MedDec 16, 2025
    WordPress
    Salient Core
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in ThemeNectar Salient Core salient-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Salient Core: from n/a through <= 3.0.8.

  • CVE-2025-58999MedDec 16, 2025
    WordPress
    WP Attractive Donations System
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in loopus WP Attractive Donations System - Easy Stripe & Paypal donations WP_AttractiveDonationsSystem allows Cross Site Request Forgery.This issue affects WP Attractive Donations System - Easy Stripe & Paypal donations: from n/a…

  • CVE-2025-54045MedDec 16, 2025
    CreativeMindsSolutions
    CM On Demand Search And Replace
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in CreativeMindsSolutions CM On Demand Search And Replace cm-on-demand-search-and-replace allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CM On Demand Search And Replace: from n/a through <= 1.5.5.

  • CVE-2025-54005MedDec 16, 2025
    WordPress
    SKT Page Builder
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in sonalsinha21 SKT Page Builder skt-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SKT Page Builder: from n/a through <= 4.9.

  • CVE-2025-54004LowDec 16, 2025
    WordPress
    Frontend Manager for WooCommerce
    risk 0.18cvss 2.7epss 0.00

    Missing Authorization vulnerability in WC Lovers WCFM – Frontend Manager for WooCommerce wc-frontend-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCFM – Frontend Manager for WooCommerce: from n/a through <= 6.7.24.

  • CVE-2025-49300LowDec 16, 2025
    WordPress
    Traveler Option Tree
    risk 0.18cvss 2.7epss 0.00

    Insertion of Sensitive Information Into Sent Data vulnerability in Shinetheme Traveler Option Tree custom-option-tree allows Retrieve Embedded Sensitive Data.This issue affects Traveler Option Tree: from n/a through 2.8.

  • CVE-2025-13231MedDec 16, 2025
    WordPress
    Fancy Product Designer
    risk 0.42cvss 6.5epss 0.00

    The Fancy Product Designer plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.4.8. This is due to a time-of-check/time-of-use (TOCTOU) race condition in the 'url' parameter of the fpd_custom_uplod_file AJAX action. The…

  • CVE-2025-13439MedDec 16, 2025
    WordPress
    Fancy Product Designer
    risk 0.38cvss 5.9epss 0.00

    The Fancy Product Designer plugin for WordPress is vulnerable to Information Disclosure and PHAR Deserialization in all versions up to, and including, 6.4.8. This is due to insufficient validation of user-supplied input in the 'url' parameter of the 'fpd_custom_uplod_file' AJAX…

  • CVE-2025-11991MedDec 16, 2025
    WordPress
    Jetformbuilder
    risk 0.34cvss 5.3epss 0.00

    The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the run_callback function in all versions up to, and including, 3.5.3. This makes it possible for unauthenticated…

  • CVE-2025-66635HigDec 16, 2025
    Epson
    Webconfig
    risk 0.47cvss 7.2epss 0.01

    Stack-based buffer overflow vulnerability exists in SEIKO EPSON Web Config. Specially crafted data input by a logged-in user may execute arbitrary code. As for the details of the affected products and versions, see the information provided by the vendor under [References].

  • CVE-2025-62330MedDec 16, 2025
    HCL DevOps Deploy
    Hcl Devops Deploy
    risk 0.38cvss 5.9epss 0.00

    HCL DevOps Deploy is susceptible to a cleartext transmission of sensitive information because the HTTP port remains accessible and does not redirect to HTTPS as intended. As a result, an attacker with network access could intercept or modify user credentials and session-related…

  • CVE-2025-14252HigDec 16, 2025
    Advantech
    SUSI
    risk 0.51cvss 7.8epss 0.00

    An Improper Access Control vulnerability in Advantech SUSI driver (susi.sys) allows attackers to read/write arbitrary memory, I/O ports, and MSRs, resulting in privilege escalation, arbitrary code execution, and information disclosure. This issue affects Advantech SUSI:…

  • CVE-2025-13794MedDec 16, 2025
    WordPress
    Auto Featured Image
    risk 0.28cvss 4.3epss 0.00

    The Auto Featured Image (Auto Post Thumbnail) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the bulk_action_generate_handler function in all versions up to, and including, 4.2.1. This makes it possible for…

  • CVE-2025-12809MedDec 16, 2025
    Dokan
    Dokan
    risk 0.27cvss 5.3epss 0.00

    The Dokan Pro plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the `/dokan/v1/wholesale/register` REST API endpoint in all versions up to, and including, 4.1.3. This makes it possible for unauthenticated attackers to…