Vendor CVEs

WordPress

All CVEs

40,118 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2025-32254	Iqonicdesign Wpbookit	Med	0.34	5.3	0.00	Apr 4, 2025	Missing Authorization vulnerability in Iqonic Design WPBookit wpbookit allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPBookit: from n/a through <= 1.0.7.
CVE-2025-32253	ComMotion Course Booking System	Med	0.34	5.3	0.01	Apr 4, 2025	Missing Authorization vulnerability in ComMotion Course Booking System course-booking-system allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Course Booking System: from n/a through <= 6.1.
CVE-2025-32252	WordPress Wpgenealogy	Med	0.34	5.3	0.01	Apr 4, 2025	Missing Authorization vulnerability in Black and White WP Genealogy – Your Family History Website wpgenealogy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Genealogy – Your Family History Website: from n/a through <= 0.1.9.
CVE-2025-32251	WordPress Jetpack Feedback Exporter	Med	0.34	5.3	0.01	Apr 4, 2025	Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in J. Tyler Wiest Jetpack Feedback Exporter jetpack-feedback-exporter allows Retrieve Embedded Sensitive Data.This issue affects Jetpack Feedback Exporter: from n/a through <= 1.23.
CVE-2025-32225	WordPress Wp Event Manager	Med	0.34	5.3	0.00	Apr 4, 2025	Missing Authorization vulnerability in WP Event Manager WP Event Manager wp-event-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Manager: from n/a through <= 3.2.0.
CVE-2025-31628	WordPress Sliced Invoices	Med	0.34	5.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in SlicedInvoices Sliced Invoices sliced-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sliced Invoices: from n/a through <= 3.10.0.
CVE-2025-31872	WordPress Wp Clone Any Post Type	Med	0.34	5.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in Galaxy Weblinks WP Clone any post type wp-clone-any-post-type allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Clone any post type: from n/a through <= 3.6.
CVE-2025-31868	Joomsky Js Job Manager	Med	0.34	5.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through <= 2.0.2.
CVE-2025-31863	WordPress Agency Toolkit	Med	0.34	5.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in inspry Agency Toolkit agency-toolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Agency Toolkit: from n/a through <= 1.0.24.
CVE-2025-31862	WordPress Job Board Manager	Med	0.34	5.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in PickPlugins Job Board Manager job-board-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Job Board Manager: from n/a through <= 2.1.61.
CVE-2025-31848	WordPress Adverts	Med	0.34	5.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in WPFactory Adverts adverts-click-tracker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Adverts: from n/a through <= 1.4.
CVE-2025-31842	WordPress Viral Loops Wp Integration	Med	0.34	5.3	0.01	Apr 1, 2025	Insertion of Sensitive Information Into Sent Data vulnerability in viralloops Viral Loops WP Integration viral-loops-wp-integration allows Retrieve Embedded Sensitive Data.This issue affects Viral Loops WP Integration: from n/a through <= 3.4.0.
CVE-2025-31836	WordPress Review Manager	Med	0.34	5.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in matthewrubin Review Manager review-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Review Manager: from n/a through <= 2.5.0.
CVE-2025-31834	WordPress JobBoard Job listing	Med	0.34	5.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in themeglow JobBoard Job listing job-board-light allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobBoard Job listing: from n/a through <= 1.2.8.
CVE-2025-31832	WordPress Acf City Selector	Med	0.34	5.3	0.01	Apr 1, 2025	Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Beee ACF City Selector acf-city-selector allows Retrieve Embedded Sensitive Data.This issue affects ACF City Selector: from n/a through <= 1.17.0.
CVE-2025-31822	WordPress Wp Simple HTML Sitemap	Med	0.34	5.3	0.01	Apr 1, 2025	Missing Authorization vulnerability in Ashish Ajani WP Simple HTML Sitemap wp-simple-html-sitemap allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Simple HTML Sitemap: from n/a through <= 3.5.
CVE-2025-31810	WordPress Question Answer	Med	0.34	5.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in PickPlugins Question Answer question-answer allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Question Answer: from n/a through <= 1.2.73.
CVE-2025-31788	WordPress AIO Performance Profiler, Monitor, Optimize, Compress & Debug	Med	0.34	5.3	0.01	Apr 1, 2025	Insertion of Sensitive Information into Log File vulnerability in Smackcoders Inc., AIO Performance Profiler, Monitor, Optimize, Compress & Debug all-in-one-performance-accelerator allows Retrieve Embedded Sensitive Data.This issue affects AIO Performance Profiler, Monitor,…
CVE-2025-31786	WordPress Simple Icons	Med	0.34	5.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in Travis Simple Icons simple-icons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Icons: from n/a through <= 2.8.4.
CVE-2025-31777	WordPress Clockinator Lite	Med	0.34	5.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in BeastThemes Clockinator Lite clockify-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clockinator Lite: from n/a through <= 1.0.9.
CVE-2025-31774	WordPress Astra Security Suite	Med	0.34	5.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in WebProtect.ai Astra Security Suite getastra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Astra Security Suite: from n/a through <= 0.2.
CVE-2025-31773	WordPress Ship Per Product	Med	0.34	5.3	0.01	Apr 1, 2025	Missing Authorization vulnerability in cedcommerce Ship Per Product ship-per-product allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Ship Per Product: from n/a through <= 2.1.0.
CVE-2025-31765	WordPress Gdpr Cookie Notice	Med	0.34	5.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in themeqx GDPR Cookie Notice gdpr-cookie-notice allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GDPR Cookie Notice: from n/a through <= 1.2.0.
CVE-2025-31618	WordPress Connector to CiviCRM with CiviMcRestFace	Med	0.34	5.3	0.00	Mar 31, 2025	Missing Authorization vulnerability in Jaap Jansma Connector to CiviCRM with CiviMcRestFace connector-civicrm-mcrestface allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Connector to CiviCRM with CiviMcRestFace: from n/a through <=…
CVE-2025-31533	Salesmate.io Salesmate Add-On for Gravity Forms	Med	0.34	5.3	0.00	Mar 31, 2025	Missing Authorization vulnerability in Salesmate.io Salesmate Add-On for Gravity Forms gf-salesmate-add-on allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Salesmate Add-On for Gravity Forms: from n/a through <= 2.0.3.
CVE-2025-31386	WordPress Simplepress	Med	0.34	5.3	0.00	Mar 31, 2025	Missing Authorization vulnerability in simplepress Simple:Press simplepress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple:Press: from n/a through <= 6.11.5.
CVE-2025-2840	WordPress DAP to Autoresponders Email Syncing	Med	0.34	5.3	0.00	Mar 29, 2025	The DAP to Autoresponders Email Syncing plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially…
CVE-2025-31469	WordPress Clear Sucuri Cache	Med	0.34	5.3	0.00	Mar 28, 2025	Missing Authorization vulnerability in webrangers Clear Sucuri Cache clear-sucuri-cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clear Sucuri Cache: from n/a through <= 1.4.
CVE-2025-22740	WordPress Sensei Lms	Med	0.34	5.3	0.00	Mar 27, 2025	Missing Authorization vulnerability in Automattic Sensei LMS sensei-lms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sensei LMS: from n/a through <= 4.24.4.
CVE-2025-22739	WordPress Learnpress	Med	0.34	5.3	0.00	Mar 27, 2025	Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through <= 4.2.7.5.
CVE-2025-22629	WordPress Inet Webkit	Med	0.34	5.3	0.00	Mar 27, 2025	Missing Authorization vulnerability in iNET iNET Webkit inet-webkit allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects iNET Webkit: from n/a through <= 1.2.2.
CVE-2025-30887	WordPress Wpevently	Med	0.34	5.3	0.00	Mar 27, 2025	Missing Authorization vulnerability in magepeopleteam WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEvently: from n/a through <= 4.2.9.
CVE-2025-30866	WordPress Terms And Conditions Per Product	Med	0.34	5.3	0.01	Mar 27, 2025	Missing Authorization vulnerability in Giannis Kipouros Terms & Conditions Per Product terms-and-conditions-per-product allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Terms & Conditions Per Product: from n/a through <= 1.2.15.
CVE-2025-30839	WordPress Taxi Booking Manager for WooCommerce	Med	0.34	5.3	0.01	Mar 27, 2025	Missing Authorization vulnerability in magepeopleteam Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Taxi Booking Manager for WooCommerce: from n/a through <= 1.2.1.
CVE-2025-30830	WordPress Cool Author Box	Med	0.34	5.3	0.00	Mar 27, 2025	Missing Authorization vulnerability in Hossni Mubarak Cool Author Box hm-cool-author-box-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cool Author Box: from n/a through <= 2.9.9.
CVE-2025-30828	Arraytics Timetics	Med	0.34	5.3	0.00	Mar 27, 2025	Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Timetics: from n/a through <= 1.0.29.
CVE-2025-30821	WordPress SNORDIAN's H5PxAPIkatchu	Med	0.34	5.3	0.01	Mar 27, 2025	Missing Authorization vulnerability in otacke SNORDIAN's H5PxAPIkatchu h5pxapikatchu allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects SNORDIAN's H5PxAPIkatchu: from n/a through <= 0.4.14.
CVE-2025-30790	WordPress Wa Chatbox Manager	Med	0.34	5.3	0.00	Mar 27, 2025	Missing Authorization vulnerability in alexvtn Chatbox Manager wa-chatbox-manager allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Chatbox Manager: from n/a through <= 1.2.2.
CVE-2025-1440	WordPress Advanced Iframe	Med	0.34	5.3	0.00	Mar 26, 2025	The Advanced iFrame plugin for WordPress is vulnerable to unauthorized excessive creation of options on the aip_map_url_callback() function in all versions up to, and including, 2024.5 due to insufficient restrictions. This makes it possible for unauthenticated attackers to…
CVE-2025-30609	WordPress Appexperts	Med	0.34	5.3	0.00	Mar 24, 2025	Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal AppExperts appexperts allows Retrieve Embedded Sensitive Data.This issue affects AppExperts: from n/a through <= 1.4.3.
CVE-2025-30592	Westerndeal Advanced Dewplayer	Med	0.34	5.3	0.00	Mar 24, 2025	Missing Authorization vulnerability in WesternDeal Advanced Dewplayer advanced-dewplayer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Dewplayer: from n/a through <= 1.6.
CVE-2025-30591	WordPress Music Press Pro	Med	0.34	5.3	0.00	Mar 24, 2025	Missing Authorization vulnerability in tuyennv Music Press Pro music-press-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Music Press Pro: from n/a through <= 1.4.6.
CVE-2025-30581	WordPress Topbar	Med	0.34	5.3	0.00	Mar 24, 2025	Missing Authorization vulnerability in PluginOps Top Bar ultimate-bar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Top Bar: from n/a through <= 3.3.
CVE-2025-2331	Givewp Givewp	Med	0.34	5.3	0.00	Mar 22, 2025	The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.22.1 via a misconfigured capability check in the 'permissionsCheck' function. This makes it possible for…
CVE-2025-1766	WordPress Eventin	Med	0.34	5.3	0.00	Mar 20, 2025	The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'payment_complete' function in all versions up to, and including, 4.0.24. This makes it…
CVE-2025-1285	WordPress Resido Real Estate Wordpress Theme	Med	0.34	5.3	0.00	Mar 14, 2025	The Resido - Real Estate WordPress Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the delete_api_key and save_api_key AJAX actions in all versions up to, and including, 3.6. This makes it possible for unauthenticated attackers…
CVE-2025-0955	WordPress Vidorev Extensions	Med	0.34	5.3	0.00	Mar 14, 2025	The VidoRev Extensions plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'vidorev_import_single_video' AJAX action in all versions up to, and including, 2.9.9.9.9.9.5. This makes it possible for unauthenticated attackers to import…
CVE-2025-28920	WordPress Responsive Google Map	Med	0.34	5.3	0.00	Mar 11, 2025	Missing Authorization vulnerability in Jogesh Responsive Google Map responsive-google-map allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Google Map: from n/a through <= 3.1.5.
CVE-2025-28872	Jwpegram Block Spam By Math Reloaded	Med	0.34	5.3	0.00	Mar 11, 2025	Missing Authorization vulnerability in jwpegram Block Spam By Math Reloaded block-spam-by-math-reloaded allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Block Spam By Math Reloaded: from n/a through <= 2.2.4.
CVE-2024-13924	FancyWP Starter Templates	Med	0.34	5.3	0.00	Mar 8, 2025	The Starter Templates by FancyWP plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.0.0 via the 'http_request_host_is_external' filter. This makes it possible for unauthenticated attackers to make web requests to…

CVE-2025-32254MedApr 4, 2025
Iqonicdesign
Wpbookit
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Iqonic Design WPBookit wpbookit allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPBookit: from n/a through <= 1.0.7.
CVE-2025-32253MedApr 4, 2025
ComMotion
Course Booking System
risk 0.34cvss 5.3epss 0.01
Missing Authorization vulnerability in ComMotion Course Booking System course-booking-system allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Course Booking System: from n/a through <= 6.1.
CVE-2025-32252MedApr 4, 2025
WordPress
Wpgenealogy
risk 0.34cvss 5.3epss 0.01
Missing Authorization vulnerability in Black and White WP Genealogy – Your Family History Website wpgenealogy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Genealogy – Your Family History Website: from n/a through <= 0.1.9.
CVE-2025-32251MedApr 4, 2025
WordPress
Jetpack Feedback Exporter
risk 0.34cvss 5.3epss 0.01
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in J. Tyler Wiest Jetpack Feedback Exporter jetpack-feedback-exporter allows Retrieve Embedded Sensitive Data.This issue affects Jetpack Feedback Exporter: from n/a through <= 1.23.
CVE-2025-32225MedApr 4, 2025
WordPress
Wp Event Manager
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in WP Event Manager WP Event Manager wp-event-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Manager: from n/a through <= 3.2.0.
CVE-2025-31628MedApr 1, 2025
WordPress
Sliced Invoices
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in SlicedInvoices Sliced Invoices sliced-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sliced Invoices: from n/a through <= 3.10.0.
CVE-2025-31872MedApr 1, 2025
WordPress
Wp Clone Any Post Type
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Galaxy Weblinks WP Clone any post type wp-clone-any-post-type allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Clone any post type: from n/a through <= 3.6.
CVE-2025-31868MedApr 1, 2025
Joomsky
Js Job Manager
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through <= 2.0.2.
CVE-2025-31863MedApr 1, 2025
WordPress
Agency Toolkit
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in inspry Agency Toolkit agency-toolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Agency Toolkit: from n/a through <= 1.0.24.
CVE-2025-31862MedApr 1, 2025
WordPress
Job Board Manager
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in PickPlugins Job Board Manager job-board-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Job Board Manager: from n/a through <= 2.1.61.
CVE-2025-31848MedApr 1, 2025
WordPress
Adverts
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in WPFactory Adverts adverts-click-tracker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Adverts: from n/a through <= 1.4.
CVE-2025-31842MedApr 1, 2025
WordPress
Viral Loops Wp Integration
risk 0.34cvss 5.3epss 0.01
Insertion of Sensitive Information Into Sent Data vulnerability in viralloops Viral Loops WP Integration viral-loops-wp-integration allows Retrieve Embedded Sensitive Data.This issue affects Viral Loops WP Integration: from n/a through <= 3.4.0.
CVE-2025-31836MedApr 1, 2025
WordPress
Review Manager
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in matthewrubin Review Manager review-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Review Manager: from n/a through <= 2.5.0.
CVE-2025-31834MedApr 1, 2025
WordPress
JobBoard Job listing
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in themeglow JobBoard Job listing job-board-light allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobBoard Job listing: from n/a through <= 1.2.8.
CVE-2025-31832MedApr 1, 2025
WordPress
Acf City Selector
risk 0.34cvss 5.3epss 0.01
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Beee ACF City Selector acf-city-selector allows Retrieve Embedded Sensitive Data.This issue affects ACF City Selector: from n/a through <= 1.17.0.
CVE-2025-31822MedApr 1, 2025
WordPress
Wp Simple HTML Sitemap
risk 0.34cvss 5.3epss 0.01
Missing Authorization vulnerability in Ashish Ajani WP Simple HTML Sitemap wp-simple-html-sitemap allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Simple HTML Sitemap: from n/a through <= 3.5.
CVE-2025-31810MedApr 1, 2025
WordPress
Question Answer
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in PickPlugins Question Answer question-answer allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Question Answer: from n/a through <= 1.2.73.
CVE-2025-31788MedApr 1, 2025
WordPress
AIO Performance Profiler, Monitor, Optimize, Compress & Debug
risk 0.34cvss 5.3epss 0.01
Insertion of Sensitive Information into Log File vulnerability in Smackcoders Inc., AIO Performance Profiler, Monitor, Optimize, Compress & Debug all-in-one-performance-accelerator allows Retrieve Embedded Sensitive Data.This issue affects AIO Performance Profiler, Monitor,…
CVE-2025-31786MedApr 1, 2025
WordPress
Simple Icons
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Travis Simple Icons simple-icons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Icons: from n/a through <= 2.8.4.
CVE-2025-31777MedApr 1, 2025
WordPress
Clockinator Lite
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in BeastThemes Clockinator Lite clockify-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clockinator Lite: from n/a through <= 1.0.9.
CVE-2025-31774MedApr 1, 2025
WordPress
Astra Security Suite
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in WebProtect.ai Astra Security Suite getastra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Astra Security Suite: from n/a through <= 0.2.
CVE-2025-31773MedApr 1, 2025
WordPress
Ship Per Product
risk 0.34cvss 5.3epss 0.01
Missing Authorization vulnerability in cedcommerce Ship Per Product ship-per-product allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Ship Per Product: from n/a through <= 2.1.0.
CVE-2025-31765MedApr 1, 2025
WordPress
Gdpr Cookie Notice
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in themeqx GDPR Cookie Notice gdpr-cookie-notice allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GDPR Cookie Notice: from n/a through <= 1.2.0.
CVE-2025-31618MedMar 31, 2025
WordPress
Connector to CiviCRM with CiviMcRestFace
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Jaap Jansma Connector to CiviCRM with CiviMcRestFace connector-civicrm-mcrestface allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Connector to CiviCRM with CiviMcRestFace: from n/a through <=…
CVE-2025-31533MedMar 31, 2025
Salesmate.io
Salesmate Add-On for Gravity Forms
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Salesmate.io Salesmate Add-On for Gravity Forms gf-salesmate-add-on allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Salesmate Add-On for Gravity Forms: from n/a through <= 2.0.3.
CVE-2025-31386MedMar 31, 2025
WordPress
Simplepress
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in simplepress Simple:Press simplepress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple:Press: from n/a through <= 6.11.5.
CVE-2025-2840MedMar 29, 2025
WordPress
DAP to Autoresponders Email Syncing
risk 0.34cvss 5.3epss 0.00
The DAP to Autoresponders Email Syncing plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially…
CVE-2025-31469MedMar 28, 2025
WordPress
Clear Sucuri Cache
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in webrangers Clear Sucuri Cache clear-sucuri-cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clear Sucuri Cache: from n/a through <= 1.4.
CVE-2025-22740MedMar 27, 2025
WordPress
Sensei Lms
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Automattic Sensei LMS sensei-lms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sensei LMS: from n/a through <= 4.24.4.
CVE-2025-22739MedMar 27, 2025
WordPress
Learnpress
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through <= 4.2.7.5.
CVE-2025-22629MedMar 27, 2025
WordPress
Inet Webkit
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in iNET iNET Webkit inet-webkit allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects iNET Webkit: from n/a through <= 1.2.2.
CVE-2025-30887MedMar 27, 2025
WordPress
Wpevently
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in magepeopleteam WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEvently: from n/a through <= 4.2.9.
CVE-2025-30866MedMar 27, 2025
WordPress
Terms And Conditions Per Product
risk 0.34cvss 5.3epss 0.01
Missing Authorization vulnerability in Giannis Kipouros Terms & Conditions Per Product terms-and-conditions-per-product allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Terms & Conditions Per Product: from n/a through <= 1.2.15.
CVE-2025-30839MedMar 27, 2025
WordPress
Taxi Booking Manager for WooCommerce
risk 0.34cvss 5.3epss 0.01
Missing Authorization vulnerability in magepeopleteam Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Taxi Booking Manager for WooCommerce: from n/a through <= 1.2.1.
CVE-2025-30830MedMar 27, 2025
WordPress
Cool Author Box
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Hossni Mubarak Cool Author Box hm-cool-author-box-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cool Author Box: from n/a through <= 2.9.9.
CVE-2025-30828MedMar 27, 2025
Arraytics
Timetics
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Timetics: from n/a through <= 1.0.29.
CVE-2025-30821MedMar 27, 2025
WordPress
SNORDIAN's H5PxAPIkatchu
risk 0.34cvss 5.3epss 0.01
Missing Authorization vulnerability in otacke SNORDIAN's H5PxAPIkatchu h5pxapikatchu allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects SNORDIAN's H5PxAPIkatchu: from n/a through <= 0.4.14.
CVE-2025-30790MedMar 27, 2025
WordPress
Wa Chatbox Manager
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in alexvtn Chatbox Manager wa-chatbox-manager allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Chatbox Manager: from n/a through <= 1.2.2.
CVE-2025-1440MedMar 26, 2025
WordPress
Advanced Iframe
risk 0.34cvss 5.3epss 0.00
The Advanced iFrame plugin for WordPress is vulnerable to unauthorized excessive creation of options on the aip_map_url_callback() function in all versions up to, and including, 2024.5 due to insufficient restrictions. This makes it possible for unauthenticated attackers to…
CVE-2025-30609MedMar 24, 2025
WordPress
Appexperts
risk 0.34cvss 5.3epss 0.00
Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal AppExperts appexperts allows Retrieve Embedded Sensitive Data.This issue affects AppExperts: from n/a through <= 1.4.3.
CVE-2025-30592MedMar 24, 2025
Westerndeal
Advanced Dewplayer
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in WesternDeal Advanced Dewplayer advanced-dewplayer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Dewplayer: from n/a through <= 1.6.
CVE-2025-30591MedMar 24, 2025
WordPress
Music Press Pro
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in tuyennv Music Press Pro music-press-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Music Press Pro: from n/a through <= 1.4.6.
CVE-2025-30581MedMar 24, 2025
WordPress
Topbar
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in PluginOps Top Bar ultimate-bar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Top Bar: from n/a through <= 3.3.
CVE-2025-2331MedMar 22, 2025
Givewp
Givewp
risk 0.34cvss 5.3epss 0.00
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.22.1 via a misconfigured capability check in the 'permissionsCheck' function. This makes it possible for…
CVE-2025-1766MedMar 20, 2025
WordPress
Eventin
risk 0.34cvss 5.3epss 0.00
The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'payment_complete' function in all versions up to, and including, 4.0.24. This makes it…
CVE-2025-1285MedMar 14, 2025
WordPress
Resido Real Estate Wordpress Theme
risk 0.34cvss 5.3epss 0.00
The Resido - Real Estate WordPress Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the delete_api_key and save_api_key AJAX actions in all versions up to, and including, 3.6. This makes it possible for unauthenticated attackers…
CVE-2025-0955MedMar 14, 2025
WordPress
Vidorev Extensions
risk 0.34cvss 5.3epss 0.00
The VidoRev Extensions plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'vidorev_import_single_video' AJAX action in all versions up to, and including, 2.9.9.9.9.9.5. This makes it possible for unauthenticated attackers to import…
CVE-2025-28920MedMar 11, 2025
WordPress
Responsive Google Map
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in Jogesh Responsive Google Map responsive-google-map allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Google Map: from n/a through <= 3.1.5.
CVE-2025-28872MedMar 11, 2025
Jwpegram
Block Spam By Math Reloaded
risk 0.34cvss 5.3epss 0.00
Missing Authorization vulnerability in jwpegram Block Spam By Math Reloaded block-spam-by-math-reloaded allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Block Spam By Math Reloaded: from n/a through <= 2.2.4.
CVE-2024-13924MedMar 8, 2025
FancyWP
Starter Templates
risk 0.34cvss 5.3epss 0.00
The Starter Templates by FancyWP plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.0.0 via the 'http_request_host_is_external' filter. This makes it possible for unauthenticated attackers to make web requests to…

Page 590 of 803