Vendor CVEs

WordPress

All CVEs

39,914 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2025-32239	WordPress Social Share Buttons & Analytics Plugin – GetSocial.Io	Med	0.28	4.3	0.00	Apr 4, 2025	Missing Authorization vulnerability in Joao Romao Social Share Buttons & Analytics Plugin – GetSocial.io wp-share-buttons-analytics-by-getsocial allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social Share Buttons & Analytics Plugin…
CVE-2025-32238	WordPress Online Booking & Scheduling Calendar for WordPress by vcita	Med	0.28	4.3	0.01	Apr 4, 2025	Generation of Error Message Containing Sensitive Information vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Retrieve Embedded Sensitive Data.This issue affects Online Booking & Scheduling Calendar for…
CVE-2025-32237	WordPress MasterStudy LMS	Med	0.28	4.3	0.00	Apr 4, 2025	Missing Authorization vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MasterStudy LMS: from n/a through <= 3.5.28.
CVE-2025-32235	WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar	Med	0.28	4.3	0.00	Apr 4, 2025	Missing Authorization vulnerability in sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar mp3-music-player-by-sonaar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from…
CVE-2025-32234	WordPress AdMail – Multilingual Back in-Stock Notifier for WooCommerce	Med	0.28	4.3	0.00	Apr 4, 2025	Missing Authorization vulnerability in aleswebs AdMail – Multilingual Back in-Stock Notifier for WooCommerce admail allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AdMail – Multilingual Back in-Stock Notifier for WooCommerce: from…
CVE-2025-32233	WordPress Revive So	Med	0.28	4.3	0.00	Apr 4, 2025	Missing Authorization vulnerability in WP Chill Revive.so revive-so allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Revive.so: from n/a through <= 2.0.3.
CVE-2025-32232	WordPress Stafflist	Med	0.28	4.3	0.00	Apr 4, 2025	Missing Authorization vulnerability in ERA404 StaffList stafflist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects StaffList: from n/a through <= 3.2.7.
CVE-2025-32231	WordPress Bookingor	Med	0.28	4.3	0.00	Apr 4, 2025	Missing Authorization vulnerability in Bookingor Bookingor bookingor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bookingor: from n/a through <= 2.0.1.
CVE-2025-32229	WordPress Variable Inspector	Med	0.28	4.3	0.00	Apr 4, 2025	Missing Authorization vulnerability in Bowo Variable Inspector variable-inspector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Variable Inspector: from n/a through <= 2.6.3.
CVE-2025-32226	WordPress Display Product Variations Dropdown On Shop Page	Med	0.28	4.3	0.00	Apr 4, 2025	Missing Authorization vulnerability in Anzar Ahmed Display product variations dropdown on shop page display-product-variations-dropdown-on-shop-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Display product variations dropdown on…
CVE-2025-32201	WordPress Xpro Theme Builder	Med	0.28	4.3	0.00	Apr 4, 2025	Missing Authorization vulnerability in Xpro Xpro Theme Builder xpro-theme-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Xpro Theme Builder: from n/a through <= 1.2.8.4.
CVE-2025-31753	WordPress Advanced Speed Increaser	Med	0.28	4.3	0.00	Apr 1, 2025	Cross-Site Request Forgery (CSRF) vulnerability in Animesh Kumar Advanced Speed Increaser advanced-speed-increaser.This issue affects Advanced Speed Increaser: from n/a through <= 2.2.1.
CVE-2025-31525	WordPress Mobile Bottom Menu For Wp	Med	0.28	4.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in WP Messiah WP Mobile Bottom Menu mobile-bottom-menu-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mobile Bottom Menu: from n/a through <= 1.4.0.
CVE-2025-31888	WordPress Wp Multi Store Locator	Med	0.28	4.3	0.00	Apr 1, 2025	Cross-Site Request Forgery (CSRF) vulnerability in WPExperts.io WP Multistore Locator wp-multi-store-locator allows Cross Site Request Forgery.This issue affects WP Multistore Locator: from n/a through <= 2.5.2.
CVE-2025-31887	WordPress Mybookprogress	Med	0.28	4.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in zookatron MyBookProgress by Stormhill Media mybookprogress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MyBookProgress by Stormhill Media: from n/a through <= 1.0.8.
CVE-2025-31886	Repuso Social proof testimonials and reviews by Repuso	Med	0.28	4.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in Repuso Social proof testimonials and reviews by Repuso social-testimonials-and-reviews-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social proof testimonials and reviews by Repuso: from…
CVE-2025-31882	Webinarpress Webinarpress	Med	0.28	4.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebinarPress: from n/a through <= 1.33.28.
CVE-2025-31880	WordPress Pearl Header Builder	Med	0.28	4.3	0.00	Apr 1, 2025	Cross-Site Request Forgery (CSRF) vulnerability in Stylemix Pearl pearl-header-builder allows Cross Site Request Forgery.This issue affects Pearl: from n/a through <= 1.3.9.
CVE-2025-31877	WordPress Restropress	Med	0.28	4.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in Magnigenie RestroPress restropress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RestroPress: from n/a through <= 3.2.8.
CVE-2025-31866	WordPress ShipDepot for WooCommerce	Med	0.28	4.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in Ship Depot ShipDepot for WooCommerce ship-depot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShipDepot for WooCommerce: from n/a through <= 1.2.19.
CVE-2025-31865	WordPress Cartboss	Med	0.28	4.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in CartBoss CartBoss cartboss allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CartBoss: from n/a through <= 4.1.2.
CVE-2025-31856	WordPress Export All Post Meta	Med	0.28	4.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in brainvireinfo Export All Post Meta export-all-post-meta allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Export All Post Meta: from n/a through <= 1.2.1.
CVE-2025-31854	WordPress Simple Sticky Add To Cart For WooCommerce	Med	0.28	4.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in Sharaz Shahid Simple Sticky Add To Cart For WooCommerce sticky-add-to-cart-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Sticky Add To Cart For WooCommerce: from n/a through <= 1.4.9.
CVE-2025-31852	WordPress Bulk Product Sync	Med	0.28	4.3	0.00	Apr 1, 2025	Cross-Site Request Forgery (CSRF) vulnerability in N-Media Bulk Product Sync sync-wc-google allows Cross Site Request Forgery.This issue affects Bulk Product Sync: from n/a through <= 8.6.
CVE-2025-31846	WordPress Theater for WordPress	Med	0.28	4.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in Jeroen Schmit Theater for WordPress theatre allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Theater for WordPress: from n/a through <= 0.18.7.
CVE-2025-31845	WordPress Theme Duplicator	Med	0.28	4.3	0.00	Apr 1, 2025	Cross-Site Request Forgery (CSRF) vulnerability in Rohit Choudhary Theme Duplicator theme-duplicator allows Cross Site Request Forgery.This issue affects Theme Duplicator: from n/a through <= 1.1.
CVE-2025-31843	WordPress OpenAI Tools for WordPress & WooCommerce	Med	0.28	4.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in Wilson OpenAI Tools for WordPress & WooCommerce openai-tools-for-wp-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OpenAI Tools for WordPress & WooCommerce: from n/a through <= 2.2.1.
CVE-2025-31840	WordPress Simple Fixed Notice	Med	0.28	4.3	0.00	Apr 1, 2025	Cross-Site Request Forgery (CSRF) vulnerability in digireturn Simple Fixed Notice dn-cookie-notice allows Cross Site Request Forgery.This issue affects Simple Fixed Notice: from n/a through <= 1.6.
CVE-2025-31839	WordPress Dn Footer Contacts	Med	0.28	4.3	0.00	Apr 1, 2025	Cross-Site Request Forgery (CSRF) vulnerability in digireturn DN Footer Contacts dn-footer-contacts allows Cross Site Request Forgery.This issue affects DN Footer Contacts: from n/a through <= 1.8.1.
CVE-2025-31831	WordPress Atomchat	Med	0.28	4.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in Team AtomChat AtomChat atomchat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AtomChat: from n/a through <= 1.1.7.
CVE-2025-31830	Uriahs Victor Printus printus-cloud-printing-for-woocommerce	Med	0.28	4.3	0.01	Apr 1, 2025	Missing Authorization vulnerability in Uriahs Victor Printus printus-cloud-printing-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Printus: from n/a through <= 1.2.6.
CVE-2025-31828	Alextselegidis Easyappointments	Med	0.28	4.3	0.00	Apr 1, 2025	Cross-Site Request Forgery (CSRF) vulnerability in alextselegidis Easy!Appointments easyappointments allows Cross Site Request Forgery.This issue affects Easy!Appointments: from n/a through <= 1.4.2.
CVE-2025-31820	WordPress Automatic Featured Images From Videos	Med	0.28	4.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in webdevstudios Automatic Featured Images from Videos automatic-featured-images-from-videos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Automatic Featured Images from Videos: from n/a through <=…
CVE-2025-31814	OwnerRez OwnerRez API	Med	0.28	4.3	0.00	Apr 1, 2025	Cross-Site Request Forgery (CSRF) vulnerability in OwnerRez OwnerRez API ownerrez allows Cross Site Request Forgery.This issue affects OwnerRez API: from n/a through <= 1.2.0.
CVE-2025-31809	WordPress Labinator Content Types Duplicator	Med	0.28	4.3	0.00	Apr 1, 2025	Cross-Site Request Forgery (CSRF) vulnerability in Labinator Labinator Content Types Duplicator labinator-content-types-duplicator allows Cross Site Request Forgery.This issue affects Labinator Content Types Duplicator: from n/a through <= 1.1.3.
CVE-2025-31808	WordPress Scss Wp Editor	Med	0.28	4.3	0.00	Apr 1, 2025	Cross-Site Request Forgery (CSRF) vulnerability in IT Path Solutions SCSS WP Editor scss-wp-editor allows Cross Site Request Forgery.This issue affects SCSS WP Editor: from n/a through <= 1.2.1.
CVE-2025-31807	WordPress Product Notices For Woocommerce	Med	0.28	4.3	0.00	Apr 1, 2025	Cross-Site Request Forgery (CSRF) vulnerability in CloudRedux Product Notices for WooCommerce product-notices-for-woocommerce allows Cross Site Request Forgery.This issue affects Product Notices for WooCommerce: from n/a through <= 1.3.4.
CVE-2025-31799	Publitio Publitio	Med	0.28	4.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in publitio Publitio publitio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Publitio: from n/a through <= 2.1.8.
CVE-2025-31798	Publitio Publitio	Med	0.28	4.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in publitio Publitio publitio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Publitio: from n/a through <= 2.1.8.
CVE-2025-31787	WordPress Cue	Med	0.28	4.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in AudioTheme Cue cue allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cue: from n/a through <= 2.4.4.
CVE-2025-31784	WordPress Embed Extended	Med	0.28	4.3	0.00	Apr 1, 2025	Cross-Site Request Forgery (CSRF) vulnerability in Rudy Susanto Embed Extended embed-extended allows Cross Site Request Forgery.This issue affects Embed Extended: from n/a through <= 1.4.0.
CVE-2025-31781	WordPress Ultimate Gift Cards For Woocommerce	Med	0.28	4.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in ahmadshyk Gift Cards for WooCommerce woo-giftcards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gift Cards for WooCommerce: from n/a through <= 1.5.8.
CVE-2025-31776	WordPress Uptime Robot Plugin	Med	0.28	4.3	0.00	Apr 1, 2025	Cross-Site Request Forgery (CSRF) vulnerability in Aphotrax Uptime Robot Plugin for WordPress uptime-robot-monitor allows Cross Site Request Forgery.This issue affects Uptime Robot Plugin for WordPress: from n/a through <= 2.3.
CVE-2025-31775	Smackcoders Inc. Google SEO Pressor Snippet	Med	0.28	4.3	0.00	Apr 1, 2025	Cross-Site Request Forgery (CSRF) vulnerability in Smackcoders Inc., Google SEO Pressor Snippet google-seo-author-snippets allows Cross Site Request Forgery.This issue affects Google SEO Pressor Snippet: from n/a through <= 2.0.
CVE-2025-31769	WordPress Clp Custom Login Page	Med	0.28	4.3	0.00	Apr 1, 2025	Cross-Site Request Forgery (CSRF) vulnerability in NiteoThemes CLP – Custom Login Page by NiteoThemes clp-custom-login-page allows Cross Site Request Forgery.This issue affects CLP – Custom Login Page by NiteoThemes: from n/a through <= 1.5.5.
CVE-2025-31763	WordPress Cache Control By Cacholong	Med	0.28	4.3	0.00	Apr 1, 2025	Cross-Site Request Forgery (CSRF) vulnerability in Preliot Cache control by Cacholong cache-control-by-cacholong allows Cross Site Request Forgery.This issue affects Cache control by Cacholong: from n/a through <= 5.4.1.
CVE-2025-31756	WordPress TZ PlusGallery	Med	0.28	4.3	0.00	Apr 1, 2025	Cross-Site Request Forgery (CSRF) vulnerability in tuyennv TZ PlusGallery tz-plus-gallery allows Cross Site Request Forgery.This issue affects TZ PlusGallery: from n/a through <= 1.5.5.
CVE-2025-31755	WordPress Pcloud Backup	Med	0.28	4.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in josselynj pCloud Backup pcloud-backup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects pCloud Backup: from n/a through <= 1.0.1.
CVE-2025-31752	WordPress Bulk Fields Editor	Med	0.28	4.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in termel Bulk Fields Editor bulk-user-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk Fields Editor: from n/a through <= 1.8.0.
CVE-2025-31732	WordPress Gb Gallery Slideshow	Med	0.28	4.3	0.00	Apr 1, 2025	Missing Authorization vulnerability in gb-plugins GB Gallery Slideshow gb-gallery-slideshow allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GB Gallery Slideshow: from n/a through <= 1.3.

CVE-2025-32239MedApr 4, 2025
WordPress
Social Share Buttons & Analytics Plugin – GetSocial.Io
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Joao Romao Social Share Buttons & Analytics Plugin – GetSocial.io wp-share-buttons-analytics-by-getsocial allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social Share Buttons & Analytics Plugin…
CVE-2025-32238MedApr 4, 2025
WordPress
Online Booking & Scheduling Calendar for WordPress by vcita
risk 0.28cvss 4.3epss 0.01
Generation of Error Message Containing Sensitive Information vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Retrieve Embedded Sensitive Data.This issue affects Online Booking & Scheduling Calendar for…
CVE-2025-32237MedApr 4, 2025
WordPress
MasterStudy LMS
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MasterStudy LMS: from n/a through <= 3.5.28.
CVE-2025-32235MedApr 4, 2025
WordPress
MP3 Audio Player for Music, Radio & Podcast by Sonaar
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar mp3-music-player-by-sonaar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from…
CVE-2025-32234MedApr 4, 2025
WordPress
AdMail – Multilingual Back in-Stock Notifier for WooCommerce
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in aleswebs AdMail – Multilingual Back in-Stock Notifier for WooCommerce admail allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AdMail – Multilingual Back in-Stock Notifier for WooCommerce: from…
CVE-2025-32233MedApr 4, 2025
WordPress
Revive So
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in WP Chill Revive.so revive-so allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Revive.so: from n/a through <= 2.0.3.
CVE-2025-32232MedApr 4, 2025
WordPress
Stafflist
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in ERA404 StaffList stafflist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects StaffList: from n/a through <= 3.2.7.
CVE-2025-32231MedApr 4, 2025
WordPress
Bookingor
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Bookingor Bookingor bookingor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bookingor: from n/a through <= 2.0.1.
CVE-2025-32229MedApr 4, 2025
WordPress
Variable Inspector
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Bowo Variable Inspector variable-inspector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Variable Inspector: from n/a through <= 2.6.3.
CVE-2025-32226MedApr 4, 2025
WordPress
Display Product Variations Dropdown On Shop Page
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Anzar Ahmed Display product variations dropdown on shop page display-product-variations-dropdown-on-shop-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Display product variations dropdown on…
CVE-2025-32201MedApr 4, 2025
WordPress
Xpro Theme Builder
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Xpro Xpro Theme Builder xpro-theme-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Xpro Theme Builder: from n/a through <= 1.2.8.4.
CVE-2025-31753MedApr 1, 2025
WordPress
Advanced Speed Increaser
risk 0.28cvss 4.3epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in Animesh Kumar Advanced Speed Increaser advanced-speed-increaser.This issue affects Advanced Speed Increaser: from n/a through <= 2.2.1.
CVE-2025-31525MedApr 1, 2025
WordPress
Mobile Bottom Menu For Wp
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in WP Messiah WP Mobile Bottom Menu mobile-bottom-menu-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mobile Bottom Menu: from n/a through <= 1.4.0.
CVE-2025-31888MedApr 1, 2025
WordPress
Wp Multi Store Locator
risk 0.28cvss 4.3epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in WPExperts.io WP Multistore Locator wp-multi-store-locator allows Cross Site Request Forgery.This issue affects WP Multistore Locator: from n/a through <= 2.5.2.
CVE-2025-31887MedApr 1, 2025
WordPress
Mybookprogress
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in zookatron MyBookProgress by Stormhill Media mybookprogress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MyBookProgress by Stormhill Media: from n/a through <= 1.0.8.
CVE-2025-31886MedApr 1, 2025
Repuso
Social proof testimonials and reviews by Repuso
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Repuso Social proof testimonials and reviews by Repuso social-testimonials-and-reviews-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social proof testimonials and reviews by Repuso: from…
CVE-2025-31882MedApr 1, 2025
Webinarpress
Webinarpress
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebinarPress: from n/a through <= 1.33.28.
CVE-2025-31880MedApr 1, 2025
WordPress
Pearl Header Builder
risk 0.28cvss 4.3epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in Stylemix Pearl pearl-header-builder allows Cross Site Request Forgery.This issue affects Pearl: from n/a through <= 1.3.9.
CVE-2025-31877MedApr 1, 2025
WordPress
Restropress
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Magnigenie RestroPress restropress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RestroPress: from n/a through <= 3.2.8.
CVE-2025-31866MedApr 1, 2025
WordPress
ShipDepot for WooCommerce
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Ship Depot ShipDepot for WooCommerce ship-depot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShipDepot for WooCommerce: from n/a through <= 1.2.19.
CVE-2025-31865MedApr 1, 2025
WordPress
Cartboss
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in CartBoss CartBoss cartboss allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CartBoss: from n/a through <= 4.1.2.
CVE-2025-31856MedApr 1, 2025
WordPress
Export All Post Meta
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in brainvireinfo Export All Post Meta export-all-post-meta allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Export All Post Meta: from n/a through <= 1.2.1.
CVE-2025-31854MedApr 1, 2025
WordPress
Simple Sticky Add To Cart For WooCommerce
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Sharaz Shahid Simple Sticky Add To Cart For WooCommerce sticky-add-to-cart-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Sticky Add To Cart For WooCommerce: from n/a through <= 1.4.9.
CVE-2025-31852MedApr 1, 2025
WordPress
Bulk Product Sync
risk 0.28cvss 4.3epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in N-Media Bulk Product Sync sync-wc-google allows Cross Site Request Forgery.This issue affects Bulk Product Sync: from n/a through <= 8.6.
CVE-2025-31846MedApr 1, 2025
WordPress
Theater for WordPress
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Jeroen Schmit Theater for WordPress theatre allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Theater for WordPress: from n/a through <= 0.18.7.
CVE-2025-31845MedApr 1, 2025
WordPress
Theme Duplicator
risk 0.28cvss 4.3epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in Rohit Choudhary Theme Duplicator theme-duplicator allows Cross Site Request Forgery.This issue affects Theme Duplicator: from n/a through <= 1.1.
CVE-2025-31843MedApr 1, 2025
WordPress
OpenAI Tools for WordPress & WooCommerce
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Wilson OpenAI Tools for WordPress & WooCommerce openai-tools-for-wp-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OpenAI Tools for WordPress & WooCommerce: from n/a through <= 2.2.1.
CVE-2025-31840MedApr 1, 2025
WordPress
Simple Fixed Notice
risk 0.28cvss 4.3epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in digireturn Simple Fixed Notice dn-cookie-notice allows Cross Site Request Forgery.This issue affects Simple Fixed Notice: from n/a through <= 1.6.
CVE-2025-31839MedApr 1, 2025
WordPress
Dn Footer Contacts
risk 0.28cvss 4.3epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in digireturn DN Footer Contacts dn-footer-contacts allows Cross Site Request Forgery.This issue affects DN Footer Contacts: from n/a through <= 1.8.1.
CVE-2025-31831MedApr 1, 2025
WordPress
Atomchat
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Team AtomChat AtomChat atomchat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AtomChat: from n/a through <= 1.1.7.
CVE-2025-31830MedApr 1, 2025
Uriahs Victor Printus
printus-cloud-printing-for-woocommerce
risk 0.28cvss 4.3epss 0.01
Missing Authorization vulnerability in Uriahs Victor Printus printus-cloud-printing-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Printus: from n/a through <= 1.2.6.
CVE-2025-31828MedApr 1, 2025
Alextselegidis
Easyappointments
risk 0.28cvss 4.3epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in alextselegidis Easy!Appointments easyappointments allows Cross Site Request Forgery.This issue affects Easy!Appointments: from n/a through <= 1.4.2.
CVE-2025-31820MedApr 1, 2025
WordPress
Automatic Featured Images From Videos
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in webdevstudios Automatic Featured Images from Videos automatic-featured-images-from-videos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Automatic Featured Images from Videos: from n/a through <=…
CVE-2025-31814MedApr 1, 2025
OwnerRez
OwnerRez API
risk 0.28cvss 4.3epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in OwnerRez OwnerRez API ownerrez allows Cross Site Request Forgery.This issue affects OwnerRez API: from n/a through <= 1.2.0.
CVE-2025-31809MedApr 1, 2025
WordPress
Labinator Content Types Duplicator
risk 0.28cvss 4.3epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in Labinator Labinator Content Types Duplicator labinator-content-types-duplicator allows Cross Site Request Forgery.This issue affects Labinator Content Types Duplicator: from n/a through <= 1.1.3.
CVE-2025-31808MedApr 1, 2025
WordPress
Scss Wp Editor
risk 0.28cvss 4.3epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in IT Path Solutions SCSS WP Editor scss-wp-editor allows Cross Site Request Forgery.This issue affects SCSS WP Editor: from n/a through <= 1.2.1.
CVE-2025-31807MedApr 1, 2025
WordPress
Product Notices For Woocommerce
risk 0.28cvss 4.3epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in CloudRedux Product Notices for WooCommerce product-notices-for-woocommerce allows Cross Site Request Forgery.This issue affects Product Notices for WooCommerce: from n/a through <= 1.3.4.
CVE-2025-31799MedApr 1, 2025
Publitio
Publitio
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in publitio Publitio publitio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Publitio: from n/a through <= 2.1.8.
CVE-2025-31798MedApr 1, 2025
Publitio
Publitio
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in publitio Publitio publitio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Publitio: from n/a through <= 2.1.8.
CVE-2025-31787MedApr 1, 2025
WordPress
Cue
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in AudioTheme Cue cue allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cue: from n/a through <= 2.4.4.
CVE-2025-31784MedApr 1, 2025
WordPress
Embed Extended
risk 0.28cvss 4.3epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in Rudy Susanto Embed Extended embed-extended allows Cross Site Request Forgery.This issue affects Embed Extended: from n/a through <= 1.4.0.
CVE-2025-31781MedApr 1, 2025
WordPress
Ultimate Gift Cards For Woocommerce
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in ahmadshyk Gift Cards for WooCommerce woo-giftcards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gift Cards for WooCommerce: from n/a through <= 1.5.8.
CVE-2025-31776MedApr 1, 2025
WordPress
Uptime Robot Plugin
risk 0.28cvss 4.3epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in Aphotrax Uptime Robot Plugin for WordPress uptime-robot-monitor allows Cross Site Request Forgery.This issue affects Uptime Robot Plugin for WordPress: from n/a through <= 2.3.
CVE-2025-31775MedApr 1, 2025
Smackcoders Inc.
Google SEO Pressor Snippet
risk 0.28cvss 4.3epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in Smackcoders Inc., Google SEO Pressor Snippet google-seo-author-snippets allows Cross Site Request Forgery.This issue affects Google SEO Pressor Snippet: from n/a through <= 2.0.
CVE-2025-31769MedApr 1, 2025
WordPress
Clp Custom Login Page
risk 0.28cvss 4.3epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in NiteoThemes CLP – Custom Login Page by NiteoThemes clp-custom-login-page allows Cross Site Request Forgery.This issue affects CLP – Custom Login Page by NiteoThemes: from n/a through <= 1.5.5.
CVE-2025-31763MedApr 1, 2025
WordPress
Cache Control By Cacholong
risk 0.28cvss 4.3epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in Preliot Cache control by Cacholong cache-control-by-cacholong allows Cross Site Request Forgery.This issue affects Cache control by Cacholong: from n/a through <= 5.4.1.
CVE-2025-31756MedApr 1, 2025
WordPress
TZ PlusGallery
risk 0.28cvss 4.3epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in tuyennv TZ PlusGallery tz-plus-gallery allows Cross Site Request Forgery.This issue affects TZ PlusGallery: from n/a through <= 1.5.5.
CVE-2025-31755MedApr 1, 2025
WordPress
Pcloud Backup
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in josselynj pCloud Backup pcloud-backup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects pCloud Backup: from n/a through <= 1.0.1.
CVE-2025-31752MedApr 1, 2025
WordPress
Bulk Fields Editor
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in termel Bulk Fields Editor bulk-user-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk Fields Editor: from n/a through <= 1.8.0.
CVE-2025-31732MedApr 1, 2025
WordPress
Gb Gallery Slideshow
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in gb-plugins GB Gallery Slideshow gb-gallery-slideshow allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GB Gallery Slideshow: from n/a through <= 1.3.

Page 676 of 799