Vulnerability index

Browse CVEs

6,923 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Missing AuthorizationCWE-862 × clear
Unclassified MEDIUM 5.4
CVE-2025-53318

Missing Authorization vulnerability in WPManiax WP DB Booster wp-db-booster allows Exploiting Incorrectly Configured Access Control Security Levels.T…

No fix yet
Fix from $1,600 2025-06-27
Unclassified MEDIUM 5.3
CVE-2025-53304

Missing Authorization vulnerability in Rohil Contact Form – 7 : Hide Success Message contact-form-7-hide-success-message allows Accessing Functionali…

Mitigation only
Fix from $1,600 2025-06-27
Unclassified MEDIUM 5.3
CVE-2025-53295

Missing Authorization vulnerability in iCount iCount Payment Gateway icount allows Accessing Functionality Not Properly Constrained by ACLs.This issu…

Mitigation only
Fix from $1,600 2025-06-27
Unclassified MEDIUM 6.5
CVE-2025-53284

Missing Authorization vulnerability in pankaj.sakaria CMS Blocks cms-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.T…

No fix yet
Fix from $1,600 2025-06-27
Unclassified MEDIUM 5.3
CVE-2025-53255

Missing Authorization vulnerability in Nabil Lemsieh HurryTimer hurrytimer allows Exploiting Incorrectly Configured Access Control Security Levels.Th…

Mitigation only
Fix from $1,600 2025-06-27
Unclassified HIGH 8.8
CVE-2025-52824

Missing Authorization vulnerability in MDJM Mobile DJ Manager mobile-dj-manager allows Exploiting Incorrectly Configured Access Control Security Leve…

Mitigation only
Fix from $1,950 2025-06-27
Unclassified HIGH 8.2
CVE-2025-52817

Missing Authorization vulnerability in ZealousWeb Abandoned Contact Form 7 abandoned-contact-form-7 allows Exploiting Incorrectly Configured Access C…

Mitigation only
Fix from $1,950 2025-06-27
Unclassified HIGH 8.2
CVE-2025-52818

Missing Authorization vulnerability in Dejan Jasnic Trusty Whistleblowing trusty-whistleblowing-solution allows Exploiting Incorrectly Configured Acc…

Mitigation only
Fix from $1,950 2025-06-27
Amazon Products To Woocommerce MEDIUM 5.3
CVE-2025-5813

The Amazon Products to WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the w…

Fix: after 1.2.7
Fix from $1,600 2025-06-26
GitLab CRITICAL 9.9
CVE-2025-5121EPSS 10%

An issue has been discovered in GitLab CE/EE affecting all versions from 17.11 before 17.11.4 and 18.0 before 18.0.2. A missing authorization check m…

Fix: 17.11.4 / 18.0.2+
Fix from $2,300 2025-06-20
Unclassified HIGH 7.5
CVE-2025-52802

Missing Authorization vulnerability in enguerranws Import YouTube videos as WP Posts import-youtube-videos-as-wp-post allows Exploiting Incorrectly C…

Mitigation only
Fix from $1,950 2025-06-20
Unclassified MEDIUM 6.5
CVE-2025-50034

Missing Authorization vulnerability in Mahmudul Hasan Arif Enhanced Blocks – Page Builder Blocks for Gutenberg enhanced-blocks allows Exploiting Inco…

Mitigation only
Fix from $1,600 2025-06-20
Unclassified MEDIUM 5.4
CVE-2025-49998

Missing Authorization vulnerability in Wetail WooCommerce Fortnox Integration woocommerce-fortnox-integration allows Exploiting Incorrectly Configure…

Mitigation only
Fix from $1,600 2025-06-20
Unclassified MEDIUM 5.4
CVE-2025-50008

Missing Authorization vulnerability in cscode WooCommerce Manager – Customize and Control Cart page, Add to Cart button, Checkout fields easily innov…

Mitigation only
Fix from $1,600 2025-06-20
Unclassified MEDIUM 5.4
CVE-2025-50009

Missing Authorization vulnerability in Climax Themes Kata Plus kata-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This…

Mitigation only
Fix from $1,600 2025-06-20
Unclassified MEDIUM 5.4
CVE-2025-50010

Missing Authorization vulnerability in Zapier Zapier for WordPress zapier allows Exploiting Incorrectly Configured Access Control Security Levels.Thi…

Mitigation only
Fix from $1,600 2025-06-20
Unclassified MEDIUM 5.3
CVE-2025-49989

Missing Authorization vulnerability in App Cheap App Builder app-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This…

Mitigation only
Fix from $1,600 2025-06-20
Unclassified MEDIUM 5.3
CVE-2025-49990

Missing Authorization vulnerability in contentstudio Contentstudio contentstudio allows Accessing Functionality Not Properly Constrained by ACLs.This…

Mitigation only
Fix from $1,600 2025-06-20
Unclassified MEDIUM 5.3
CVE-2025-49991

Missing Authorization vulnerability in tggfref WP-Recall allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WP-Recal…

Mitigation only
Fix from $1,600 2025-06-20
Unclassified MEDIUM 5.3
CVE-2025-49993

Missing Authorization vulnerability in csarturas Cookie-Script.com cookie-script-com allows Exploiting Incorrectly Configured Access Control Security…

No fix yet
Fix from $1,600 2025-06-20
Unclassified MEDIUM 5.3
CVE-2025-49996

Missing Authorization vulnerability in osama.esh WP Visitor Statistics (Real Time Traffic) wp-stats-manager allows Accessing Functionality Not Proper…

Mitigation only
Fix from $1,600 2025-06-20
Unclassified MEDIUM 5.3
CVE-2025-49997

Missing Authorization vulnerability in Syed Balkhi Giveaways and Contests by RafflePress rafflepress allows Accessing Functionality Not Properly Cons…

Mitigation only
Fix from $1,600 2025-06-20
Unclassified MEDIUM 5.3
CVE-2025-49986

Missing Authorization vulnerability in thanhtungtnt Video List Manager video-list-manager allows Accessing Functionality Not Properly Constrained by …

Mitigation only
Fix from $1,600 2025-06-20
Unclassified MEDIUM 5.3
CVE-2025-49987

Missing Authorization vulnerability in WPFactory CRM ERP Business Solution crm-erp-business-solution allows Exploiting Incorrectly Configured Access …

Mitigation only
Fix from $1,600 2025-06-20
Unclassified MEDIUM 5.3
CVE-2025-49988

Missing Authorization vulnerability in Renzo Johnson Contact Form 7 AWeber Extension integrate-contact-form-7-and-aweber allows Exploiting Incorrectl…

Mitigation only
Fix from $1,600 2025-06-20
Powerscale Onefs CRITICAL 9.8
CVE-2024-53298

Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.1, contains a missing authorization vulnerability in the NFS export. An unauthenticated attack…

Fix: after 9.10.0.1
Fix from $2,300 2025-06-20
Givewp MEDIUM 5.4
CVE-2025-4571

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized view and modification of data due to an insu…

Fix: 4.3.1+
Fix from $1,600 2025-06-19
Funnelkit Automations CRITICAL 9.8
CVE-2025-1562

The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to unauth…

Fix: 3.6.0+
Fix from $2,300 2025-06-18
Unclassified MEDIUM 5.3
CVE-2025-49864

Missing Authorization vulnerability in AFS Analytics AFS Analytics addfreestats allows Accessing Functionality Not Properly Constrained by ACLs.This …

Mitigation only
Fix from $1,600 2025-06-17
Unclassified MEDIUM 5.3
CVE-2025-49872

Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects my…

Mitigation only
Fix from $1,600 2025-06-17