Vendor CVEs

WordPress

All CVEs

40,119 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2025-68997	WordPress Wpdiscuz	Med	0.34	5.3	0.00	Dec 30, 2025	Authorization Bypass Through User-Controlled Key vulnerability in AdvancedCoding wpDiscuz wpdiscuz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpDiscuz: from n/a through <= 7.6.43.
CVE-2025-68994	WordPress Product Loops for WooCommerce	Med	0.34	5.3	0.00	Dec 30, 2025	Missing Authorization vulnerability in XforWooCommerce Product Loops for WooCommerce product-loops allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Loops for WooCommerce: from n/a through <= 2.1.2.
CVE-2025-68993	WordPress Share, Print and PDF Products for WooCommerce	Med	0.34	5.3	0.00	Dec 30, 2025	Missing Authorization vulnerability in XforWooCommerce Share, Print and PDF Products for WooCommerce share-print-pdf-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Share, Print and PDF Products for WooCommerce: from n/a…
CVE-2025-68988	WordPress Einvoiceapp Malaysia	Med	0.34	5.3	0.00	Dec 30, 2025	Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in o2oe E-Invoice App Malaysia einvoiceapp-malaysia allows Retrieve Embedded Sensitive Data.This issue affects E-Invoice App Malaysia: from n/a through <= 1.3.0.
CVE-2025-68982	WordPress Designthemes Lms Addon	Med	0.34	5.3	0.00	Dec 30, 2025	Missing Authorization vulnerability in designthemes DesignThemes LMS Addon designthemes-lms-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DesignThemes LMS Addon: from n/a through <= 2.6.
CVE-2025-68981	WordPress HomeFix Elementor Portfolio	Med	0.34	5.3	0.00	Dec 30, 2025	Missing Authorization vulnerability in designthemes HomeFix Elementor Portfolio homefix-ele-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HomeFix Elementor Portfolio: from n/a through <= 1.0.1.
CVE-2025-68980	WordPress WeDesignTech Portfolio	Med	0.34	5.3	0.00	Dec 30, 2025	Missing Authorization vulnerability in designthemes WeDesignTech Portfolio wedesigntech-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WeDesignTech Portfolio: from n/a through <= 1.0.2.
CVE-2025-68979	WordPress Google Calendar Events	Med	0.34	5.3	0.00	Dec 30, 2025	Authorization Bypass Through User-Controlled Key vulnerability in SimpleCalendar Google Calendar Events google-calendar-events allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Google Calendar Events: from n/a through <= 3.5.9.
CVE-2025-68606	WordPress Postx	Med	0.34	5.3	0.00	Dec 24, 2025	Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPXPO PostX ultimate-post allows Retrieve Embedded Sensitive Data.This issue affects PostX: from n/a through <= 5.0.3.
CVE-2025-68596	WordPress Bit Assist	Med	0.34	5.3	0.00	Dec 24, 2025	Missing Authorization vulnerability in Bit Apps Bit Assist bit-assist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bit Assist: from n/a through <= 1.5.11.
CVE-2025-68595	WordPress Social Photo Feed Widget	Med	0.34	5.3	0.00	Dec 24, 2025	Missing Authorization vulnerability in Trustindex Widgets for Social Photo Feed social-photo-feed-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Widgets for Social Photo Feed: from n/a through <= 1.8.
CVE-2025-68594	WordPress Poll, Survey & Quiz Maker Plugin by Opinion Stage	Med	0.34	5.3	0.00	Dec 24, 2025	Missing Authorization vulnerability in Opinion Stage Poll, Survey & Quiz Maker Plugin by Opinion Stage social-polls-by-opinionstage allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll, Survey & Quiz Maker Plugin by Opinion Stage: from…
CVE-2025-68589	WordPress Wptelegram Widget	Med	0.34	5.3	0.00	Dec 24, 2025	Missing Authorization vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Telegram Widget and Join Link: from n/a through <= 2.2.12.
CVE-2025-68586	WordPress Cooked	Med	0.34	5.3	0.00	Dec 24, 2025	Missing Authorization vulnerability in Gora Tech Cooked cooked allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cooked: from n/a through <= 1.11.3.
CVE-2025-68582	WordPress Funnelforms Free	Med	0.34	5.3	0.00	Dec 24, 2025	Missing Authorization vulnerability in Funnelforms Funnelforms Free funnelforms-free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Funnelforms Free: from n/a through <= 3.8.
CVE-2025-68579	WordPress FV Simpler SEO	Med	0.34	5.3	0.00	Dec 24, 2025	Missing Authorization vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FV Simpler SEO: from n/a through <= 1.9.6.
CVE-2025-68578	WordPress Addonify Quick View	Med	0.34	5.3	0.00	Dec 24, 2025	Missing Authorization vulnerability in Addonify Addonify addonify-quick-view allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Addonify: from n/a through <= 2.0.4.
CVE-2025-68575	WordPress Wappointment	Med	0.34	5.3	0.00	Dec 24, 2025	Missing Authorization vulnerability in Wappointment team Wappointment wappointment allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wappointment: from n/a through <= 2.7.6.
CVE-2025-68572	WordPress Bbp Core	Med	0.34	5.3	0.00	Dec 24, 2025	Missing Authorization vulnerability in Spider Themes BBP Core bbp-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BBP Core: from n/a through <= 1.4.1.
CVE-2025-68571	Salesmanago Salesmanago	Med	0.34	5.3	0.00	Dec 24, 2025	Missing Authorization vulnerability in SALESmanago SALESmanago & Leadoo salesmanago allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SALESmanago & Leadoo: from n/a through <= 3.9.0.
CVE-2025-68568	WordPress Claspo – Popups, Spin the Wheel & Email Capture	Med	0.34	5.3	0.00	Dec 24, 2025	Missing Authorization vulnerability in Claspo Popup Builders Claspo – Popups, Spin the Wheel & Email Capture claspo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Claspo – Popups, Spin the Wheel & Email Capture: from n/a through <=…
CVE-2025-68565	WordPress Ttv Easy Embed Player	Med	0.34	5.3	0.00	Dec 24, 2025	Missing Authorization vulnerability in JayBee Twitch Player ttv-easy-embed-player allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Twitch Player: from n/a through <= 2.1.3.
CVE-2025-68521	WordPress Wpstream	Med	0.34	5.3	0.00	Dec 24, 2025	Missing Authorization vulnerability in wpstream WpStream wpstream allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpStream: from n/a through <= 4.9.5.
CVE-2025-68508	Brave brave-popup-builder	Med	0.34	5.3	0.00	Dec 24, 2025	Missing Authorization vulnerability in Brave Brave brave-popup-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brave: from n/a through <= 0.8.3.
CVE-2025-68505	WordPress H5p	Med	0.34	5.3	0.00	Dec 24, 2025	Missing Authorization vulnerability in icc0rz H5P h5p allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects H5P: from n/a through <= 1.16.1.
CVE-2025-68494	Leap13 Premium Addons For Elementor	Med	0.34	5.3	0.00	Dec 24, 2025	Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor allows Retrieve Embedded Sensitive Data.This issue affects Premium Addons for Elementor: from n/a through <= 4.11.53.
CVE-2025-68556	WordPress Happy Helpdesk Support Ticket System	Med	0.34	5.3	0.00	Dec 23, 2025	Missing Authorization vulnerability in VillaTheme HAPPY happy-helpdesk-support-ticket-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HAPPY: from n/a through <= 1.0.9.
CVE-2023-52210	WordPress Product Delivery Date For Woocommerce Lite	Med	0.34	5.3	0.00	Dec 23, 2025	Vulnerability in Tyche softwares Product Delivery Date for WooCommerce – Lite.This issue affects Product Delivery Date for WooCommerce – Lite: from n/a through 2.7.0.
CVE-2025-14080	WordPress Frontend Post Submission Manager Lite	Med	0.34	5.3	0.00	Dec 21, 2025	The Frontend Post Submission Manager Lite plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.2.5. This is due to missing authorization checks on the post update functionality in the fpsml_form_process AJAX action. This makes it…
CVE-2025-14043	WordPress Tainacan	Med	0.34	5.3	0.00	Dec 21, 2025	The Tainacan plugin for WordPress is vulnerable to unauthorized metadata section creation due to missing authorization checks in all versions up to, and including, 1.0.1. This is due to the `create_item_permissions_check()` function unconditionally returning true, which bypasses…
CVE-2025-12492	WordPress Ultimatemember	Med	0.34	5.3	0.01	Dec 20, 2025	The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11.0 via the ajax_get_members function. This is due…
CVE-2025-12820	WordPress Pure Wc Variation Swatches	Med	0.34	5.3	0.00	Dec 20, 2025	The Pure WC Variation Swatches WordPress plugin through 1.1.7 does not have an authorization check when updating its settings, which could allow any authenticated users to update them.
CVE-2025-14633	WordPress F70 Lead Document Download	Med	0.34	5.3	0.00	Dec 20, 2025	The F70 Lead Document Download plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'file_download' function in all versions up to, and including, 1.4.4. This makes it possible for unauthenticated attackers to download any…
CVE-2025-12898	WordPress Pretty Google Calendar	Med	0.34	5.3	0.00	Dec 20, 2025	The Pretty Google Calendar plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the pgcal_ajax_handler() function in all versions up to, and including, 2.0.0. This makes it possible for unauthenticated attackers to retrieve the…
CVE-2025-63043	WordPress Post Grid and Gutenberg Blocks	Med	0.34	5.3	0.00	Dec 18, 2025	Authorization Bypass Through User-Controlled Key vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid and Gutenberg Blocks: from n/a through <= 2.3.23.
CVE-2025-63002	WordPress Sermon Manager	Med	0.34	5.3	0.00	Dec 18, 2025	Missing Authorization vulnerability in wpforchurch Sermon Manager sermon-manager-for-wordpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sermon Manager: from n/a through <= 2.30.0.
CVE-2025-14061	WordPress Wp Cookie Consent	Med	0.34	5.3	0.00	Dec 17, 2025	The Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the gdpr_delete_policy_data function in all…
CVE-2025-67985	WordPress Document Library Lite	Med	0.34	5.3	0.00	Dec 16, 2025	Authorization Bypass Through User-Controlled Key vulnerability in Barn2 Plugins Document Library Lite document-library-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Document Library Lite: from n/a through <= 1.1.7.
CVE-2025-67965	WordPress Homey Core	Med	0.34	5.3	0.00	Dec 16, 2025	Missing Authorization vulnerability in favethemes Homey Core homey-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Homey Core: from n/a through <= 2.4.3.
CVE-2025-67929	WordPress Ti Woocommerce Wishlist	Med	0.34	5.3	0.00	Dec 16, 2025	Missing Authorization vulnerability in templateinvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TI WooCommerce Wishlist: from n/a through <= 2.10.0.
CVE-2025-66133	WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent	Med	0.34	5.3	0.00	Dec 16, 2025	Missing Authorization vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent gdpr-cookie-consent allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cookie Notice for GDPR, CCPA & ePrivacy Consent: from n/a…
CVE-2025-66132	FAPI Business s.r.o. FAPI Member	Med	0.34	5.3	0.00	Dec 16, 2025	Authorization Bypass Through User-Controlled Key vulnerability in FAPI Business s.r.o. FAPI Member fapi-member allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FAPI Member: from n/a through <= 2.2.30.
CVE-2025-66131	WordPress Yaad Sarig Payment Gateway For Wc	Med	0.34	5.3	0.00	Dec 16, 2025	Missing Authorization vulnerability in yaadsarig Yaad Sarig Payment Gateway For WC yaad-sarig-payment-gateway-for-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Yaad Sarig Payment Gateway For WC: from n/a through <= 2.2.11.
CVE-2025-66130	WordPress WP Views Counter	Med	0.34	5.3	0.00	Dec 16, 2025	Missing Authorization vulnerability in etruel WP Views Counter wpecounter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Views Counter: from n/a through <= 2.1.2.
CVE-2025-66129	WordPress Pochipp	Med	0.34	5.3	0.00	Dec 16, 2025	Missing Authorization vulnerability in wppochipp Pochipp pochipp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pochipp: from n/a through <= 1.18.0.
CVE-2025-66128	Brevo Sendinblue for WooCommerce	Med	0.34	5.3	0.00	Dec 16, 2025	Missing Authorization vulnerability in Brevo Sendinblue for WooCommerce woocommerce-sendinblue-newsletter-subscription allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sendinblue for WooCommerce: from n/a through <= 4.0.49.
CVE-2025-66127	WordPress Essential Real Estate	Med	0.34	5.3	0.00	Dec 16, 2025	Missing Authorization vulnerability in g5theme Essential Real Estate essential-real-estate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Real Estate: from n/a through <= 5.3.2.
CVE-2025-66126	WordPress Fix Media Library	Med	0.34	5.3	0.00	Dec 16, 2025	Insertion of Sensitive Information Into Sent Data vulnerability in wowpress.host Fix Media Library wow-media-library-fix allows Retrieve Embedded Sensitive Data.This issue affects Fix Media Library: from n/a through <= 2.0.
CVE-2025-66125	WordPress Ultimate Auction	Med	0.34	5.3	0.00	Dec 16, 2025	Insertion of Sensitive Information Into Sent Data vulnerability in Nitesh Ultimate Auction ultimate-auction allows Retrieve Embedded Sensitive Data.This issue affects Ultimate Auction : from n/a through <= 4.3.3.
CVE-2025-66124	WordPress Leaky Paywall	Med	0.34	5.3	0.00	Dec 16, 2025	Missing Authorization vulnerability in ZEEN101 Leaky Paywall leaky-paywall allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Leaky Paywall: from n/a through <= 4.22.6.

CVE-2025-68997MedDec 30, 2025
WordPress
Wpdiscuz
risk 0.34cvss 5.3epss 0.00
Authorization Bypass Through User-Controlled Key vulnerability in AdvancedCoding wpDiscuz wpdiscuz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpDiscuz: from n/a through <= 7.6.43.
CVE-2025-68994MedDec 30, 2025
WordPress
Product Loops for WooCommerce
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in XforWooCommerce Product Loops for WooCommerce product-loops allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Loops for WooCommerce: from n/a through <= 2.1.2.
CVE-2025-68993MedDec 30, 2025
WordPress
Share, Print and PDF Products for WooCommerce
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in XforWooCommerce Share, Print and PDF Products for WooCommerce share-print-pdf-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Share, Print and PDF Products for WooCommerce: from n/a…
CVE-2025-68988MedDec 30, 2025
WordPress
Einvoiceapp Malaysia
risk 0.34cvss 5.3epss 0.00
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in o2oe E-Invoice App Malaysia einvoiceapp-malaysia allows Retrieve Embedded Sensitive Data.This issue affects E-Invoice App Malaysia: from n/a through <= 1.3.0.
CVE-2025-68982MedDec 30, 2025
WordPress
Designthemes Lms Addon
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in designthemes DesignThemes LMS Addon designthemes-lms-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DesignThemes LMS Addon: from n/a through <= 2.6.
CVE-2025-68981MedDec 30, 2025
WordPress
HomeFix Elementor Portfolio
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in designthemes HomeFix Elementor Portfolio homefix-ele-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HomeFix Elementor Portfolio: from n/a through <= 1.0.1.
CVE-2025-68980MedDec 30, 2025
WordPress
WeDesignTech Portfolio
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in designthemes WeDesignTech Portfolio wedesigntech-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WeDesignTech Portfolio: from n/a through <= 1.0.2.
CVE-2025-68979MedDec 30, 2025
WordPress
Google Calendar Events
risk 0.34cvss 5.3epss 0.00
Authorization Bypass Through User-Controlled Key vulnerability in SimpleCalendar Google Calendar Events google-calendar-events allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Google Calendar Events: from n/a through <= 3.5.9.
CVE-2025-68606MedDec 24, 2025
WordPress
Postx
risk 0.34cvss 5.3epss 0.00
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPXPO PostX ultimate-post allows Retrieve Embedded Sensitive Data.This issue affects PostX: from n/a through <= 5.0.3.
CVE-2025-68596MedDec 24, 2025
WordPress
Bit Assist
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Bit Apps Bit Assist bit-assist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bit Assist: from n/a through <= 1.5.11.
CVE-2025-68595MedDec 24, 2025
WordPress
Social Photo Feed Widget
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Trustindex Widgets for Social Photo Feed social-photo-feed-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Widgets for Social Photo Feed: from n/a through <= 1.8.
CVE-2025-68594MedDec 24, 2025
WordPress
Poll, Survey & Quiz Maker Plugin by Opinion Stage
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Opinion Stage Poll, Survey & Quiz Maker Plugin by Opinion Stage social-polls-by-opinionstage allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll, Survey & Quiz Maker Plugin by Opinion Stage: from…
CVE-2025-68589MedDec 24, 2025
WordPress
Wptelegram Widget
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Telegram Widget and Join Link: from n/a through <= 2.2.12.
CVE-2025-68586MedDec 24, 2025
WordPress
Cooked
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Gora Tech Cooked cooked allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cooked: from n/a through <= 1.11.3.
CVE-2025-68582MedDec 24, 2025
WordPress
Funnelforms Free
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Funnelforms Funnelforms Free funnelforms-free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Funnelforms Free: from n/a through <= 3.8.
CVE-2025-68579MedDec 24, 2025
WordPress
FV Simpler SEO
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FV Simpler SEO: from n/a through <= 1.9.6.
CVE-2025-68578MedDec 24, 2025
WordPress
Addonify Quick View
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Addonify Addonify addonify-quick-view allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Addonify: from n/a through <= 2.0.4.
CVE-2025-68575MedDec 24, 2025
WordPress
Wappointment
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Wappointment team Wappointment wappointment allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wappointment: from n/a through <= 2.7.6.
CVE-2025-68572MedDec 24, 2025
WordPress
Bbp Core
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Spider Themes BBP Core bbp-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BBP Core: from n/a through <= 1.4.1.
CVE-2025-68571MedDec 24, 2025
Salesmanago
Salesmanago
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in SALESmanago SALESmanago & Leadoo salesmanago allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SALESmanago & Leadoo: from n/a through <= 3.9.0.
CVE-2025-68568MedDec 24, 2025
WordPress
Claspo – Popups, Spin the Wheel & Email Capture
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Claspo Popup Builders Claspo – Popups, Spin the Wheel & Email Capture claspo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Claspo – Popups, Spin the Wheel & Email Capture: from n/a through <=…
CVE-2025-68565MedDec 24, 2025
WordPress
Ttv Easy Embed Player
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in JayBee Twitch Player ttv-easy-embed-player allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Twitch Player: from n/a through <= 2.1.3.
CVE-2025-68521MedDec 24, 2025
WordPress
Wpstream
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in wpstream WpStream wpstream allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpStream: from n/a through <= 4.9.5.
CVE-2025-68508MedDec 24, 2025
Brave
brave-popup-builder
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Brave Brave brave-popup-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brave: from n/a through <= 0.8.3.
CVE-2025-68505MedDec 24, 2025
WordPress
H5p
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in icc0rz H5P h5p allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects H5P: from n/a through <= 1.16.1.
CVE-2025-68494MedDec 24, 2025
Leap13
Premium Addons For Elementor
risk 0.34cvss 5.3epss 0.00
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor allows Retrieve Embedded Sensitive Data.This issue affects Premium Addons for Elementor: from n/a through <= 4.11.53.
CVE-2025-68556MedDec 23, 2025
WordPress
Happy Helpdesk Support Ticket System
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in VillaTheme HAPPY happy-helpdesk-support-ticket-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HAPPY: from n/a through <= 1.0.9.
CVE-2023-52210MedDec 23, 2025
WordPress
Product Delivery Date For Woocommerce Lite
risk 0.34cvss 5.3epss 0.00
Vulnerability in Tyche softwares Product Delivery Date for WooCommerce – Lite.This issue affects Product Delivery Date for WooCommerce – Lite: from n/a through 2.7.0.
CVE-2025-14080MedDec 21, 2025
WordPress
Frontend Post Submission Manager Lite
risk 0.34cvss 5.3epss 0.00
The Frontend Post Submission Manager Lite plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.2.5. This is due to missing authorization checks on the post update functionality in the fpsml_form_process AJAX action. This makes it…
CVE-2025-14043MedDec 21, 2025
WordPress
Tainacan
risk 0.34cvss 5.3epss 0.00
The Tainacan plugin for WordPress is vulnerable to unauthorized metadata section creation due to missing authorization checks in all versions up to, and including, 1.0.1. This is due to the `create_item_permissions_check()` function unconditionally returning true, which bypasses…
CVE-2025-12492MedDec 20, 2025
WordPress
Ultimatemember
risk 0.34cvss 5.3epss 0.01
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11.0 via the ajax_get_members function. This is due…
CVE-2025-12820MedDec 20, 2025
WordPress
Pure Wc Variation Swatches
risk 0.34cvss 5.3epss 0.00
The Pure WC Variation Swatches WordPress plugin through 1.1.7 does not have an authorization check when updating its settings, which could allow any authenticated users to update them.
CVE-2025-14633MedDec 20, 2025
WordPress
F70 Lead Document Download
risk 0.34cvss 5.3epss 0.00
The F70 Lead Document Download plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'file_download' function in all versions up to, and including, 1.4.4. This makes it possible for unauthenticated attackers to download any…
CVE-2025-12898MedDec 20, 2025
WordPress
Pretty Google Calendar
risk 0.34cvss 5.3epss 0.00
The Pretty Google Calendar plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the pgcal_ajax_handler() function in all versions up to, and including, 2.0.0. This makes it possible for unauthenticated attackers to retrieve the…
CVE-2025-63043MedDec 18, 2025
WordPress
Post Grid and Gutenberg Blocks
risk 0.34cvss 5.3epss 0.00
Authorization Bypass Through User-Controlled Key vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid and Gutenberg Blocks: from n/a through <= 2.3.23.
CVE-2025-63002MedDec 18, 2025
WordPress
Sermon Manager
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in wpforchurch Sermon Manager sermon-manager-for-wordpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sermon Manager: from n/a through <= 2.30.0.
CVE-2025-14061MedDec 17, 2025
WordPress
Wp Cookie Consent
risk 0.34cvss 5.3epss 0.00
The Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the gdpr_delete_policy_data function in all…
CVE-2025-67985MedDec 16, 2025
WordPress
Document Library Lite
risk 0.34cvss 5.3epss 0.00
Authorization Bypass Through User-Controlled Key vulnerability in Barn2 Plugins Document Library Lite document-library-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Document Library Lite: from n/a through <= 1.1.7.
CVE-2025-67965MedDec 16, 2025
WordPress
Homey Core
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in favethemes Homey Core homey-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Homey Core: from n/a through <= 2.4.3.
CVE-2025-67929MedDec 16, 2025
WordPress
Ti Woocommerce Wishlist
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in templateinvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TI WooCommerce Wishlist: from n/a through <= 2.10.0.
CVE-2025-66133MedDec 16, 2025
WordPress
WP Cookie Notice for GDPR, CCPA & ePrivacy Consent
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent gdpr-cookie-consent allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cookie Notice for GDPR, CCPA & ePrivacy Consent: from n/a…
CVE-2025-66132MedDec 16, 2025
FAPI Business s.r.o.
FAPI Member
risk 0.34cvss 5.3epss 0.00
Authorization Bypass Through User-Controlled Key vulnerability in FAPI Business s.r.o. FAPI Member fapi-member allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FAPI Member: from n/a through <= 2.2.30.
CVE-2025-66131MedDec 16, 2025
WordPress
Yaad Sarig Payment Gateway For Wc
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in yaadsarig Yaad Sarig Payment Gateway For WC yaad-sarig-payment-gateway-for-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Yaad Sarig Payment Gateway For WC: from n/a through <= 2.2.11.
CVE-2025-66130MedDec 16, 2025
WordPress
WP Views Counter
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in etruel WP Views Counter wpecounter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Views Counter: from n/a through <= 2.1.2.
CVE-2025-66129MedDec 16, 2025
WordPress
Pochipp
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in wppochipp Pochipp pochipp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pochipp: from n/a through <= 1.18.0.
CVE-2025-66128MedDec 16, 2025
Brevo
Sendinblue for WooCommerce
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Brevo Sendinblue for WooCommerce woocommerce-sendinblue-newsletter-subscription allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sendinblue for WooCommerce: from n/a through <= 4.0.49.
CVE-2025-66127MedDec 16, 2025
WordPress
Essential Real Estate
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in g5theme Essential Real Estate essential-real-estate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Real Estate: from n/a through <= 5.3.2.
CVE-2025-66126MedDec 16, 2025
WordPress
Fix Media Library
risk 0.34cvss 5.3epss 0.00
Insertion of Sensitive Information Into Sent Data vulnerability in wowpress.host Fix Media Library wow-media-library-fix allows Retrieve Embedded Sensitive Data.This issue affects Fix Media Library: from n/a through <= 2.0.
CVE-2025-66125MedDec 16, 2025
WordPress
Ultimate Auction
risk 0.34cvss 5.3epss 0.00
Insertion of Sensitive Information Into Sent Data vulnerability in Nitesh Ultimate Auction ultimate-auction allows Retrieve Embedded Sensitive Data.This issue affects Ultimate Auction : from n/a through <= 4.3.3.
CVE-2025-66124MedDec 16, 2025
WordPress
Leaky Paywall
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in ZEEN101 Leaky Paywall leaky-paywall allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Leaky Paywall: from n/a through <= 4.22.6.

Page 581 of 803