Vulnerability index

Browse CVEs

6,923 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Missing AuthorizationCWE-862 × clear
Unclassified HIGH 8.4
CVE-2025-2298

An improper authorization vulnerability in Dremio Software allows authenticated users to delete arbitrary files that the system has access to, includ…

Mitigation only
Fix from $1,950 2025-04-21
My Bbs MEDIUM 6.5
CVE-2025-3808

A vulnerability has been found in zhenfeng13 My-BBS 1.0 and classified as problematic. This vulnerability affects unknown code. The manipulation lead…

No fix yet
Fix from $1,600 2025-04-19
Seclore CRITICAL 9.8
CVE-2024-53591

An issue in the login page of Seclore v3.27.5.0 allows attackers to bypass authentication via a brute force attack.

No fix yet
Fix from $2,300 2025-04-18
Unclassified MEDIUM 5.8
CVE-2025-39580

Missing Authorization vulnerability in jidaikobo Dashi dashi allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Dashi…

Mitigation only
Fix from $1,600 2025-04-17
Unclassified HIGH 7.1
CVE-2025-39583

Missing Authorization vulnerability in Bertha AI – Andrew Palmer BERTHA AI bertha-ai-free allows Exploiting Incorrectly Configured Access Control Sec…

Mitigation only
Fix from $1,950 2025-04-17
Unclassified MEDIUM 6.5
CVE-2025-39554

Missing Authorization vulnerability in Elliot Sowersby / RelyWP AI Text to Speech ai-text-to-speech allows Exploiting Incorrectly Configured Access C…

Mitigation only
Fix from $1,600 2025-04-17
Unclassified MEDIUM 6.5
CVE-2025-39559

Missing Authorization vulnerability in Eivin Landa Bring Fraktguiden for WooCommerce bring-fraktguiden-for-woocommerce allows Exploiting Incorrectly …

Mitigation only
Fix from $1,600 2025-04-17
Unclassified HIGH 7.5
CVE-2025-39532

Missing Authorization vulnerability in spicethemes Spice Blocks spice-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.…

Mitigation only
Fix from $1,950 2025-04-17
Unclassified HIGH 8.8
CVE-2025-39533

Missing Authorization vulnerability in Starfish Reviews Starfish Review Generation & Marketing starfish-reviews allows Privilege Escalation.This issu…

Mitigation only
Fix from $1,950 2025-04-17
Unclassified MEDIUM 5.4
CVE-2025-39456

Missing Authorization vulnerability in iTRON WP Logger wp-data-logger allows Exploiting Incorrectly Configured Access Control Security Levels.This is…

No fix yet
Fix from $1,600 2025-04-17
Unclassified MEDIUM 5.3
CVE-2025-39457

Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorre…

Mitigation only
Fix from $1,600 2025-04-17
Unclassified HIGH 7.1
CVE-2025-32620

Missing Authorization vulnerability in fromdoppler Doppler Forms doppler-form allows Exploiting Incorrectly Configured Access Control Security Levels…

Mitigation only
Fix from $1,950 2025-04-17
Unclassified HIGH 8.2
CVE-2025-32593

Missing Authorization vulnerability in Bytes Technolab Add Product Frontend for WooCommerce add-product-frontend-for-woocommerce allows Exploiting In…

Mitigation only
Fix from $1,950 2025-04-17
Unclassified HIGH 7.5
CVE-2025-32544

Missing Authorization vulnerability in The Right Software WooCommerce Loyal Customers woocommerce-loyal-customer allows Accessing Functionality Not P…

Mitigation only
Fix from $1,950 2025-04-17
Unclassified MEDIUM 6.5
CVE-2025-27310

Missing Authorization vulnerability in Radius of Thought Page and Post Lister page-and-post-lister allows Exploiting Incorrectly Configured Access Co…

Mitigation only
Fix from $1,600 2025-04-17
Unclassified HIGH 7.5
CVE-2025-26968

Missing Authorization vulnerability in webbernaut Cloak Front End Email allows Exploiting Incorrectly Configured Access Control Security Levels. This…

Mitigation only
Fix from $1,950 2025-04-17
Unclassified MEDIUM 6.5
CVE-2025-24737

Missing Authorization vulnerability in Mat Bao Corporation WP Helper Premium wp-helper-lite allows Accessing Functionality Not Properly Constrained b…

Mitigation only
Fix from $1,600 2025-04-17
Unclassified MEDIUM 6.5
CVE-2025-24583

Missing Authorization vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Exploiting Incorrectly Configured Access Contr…

No fix yet
Fix from $1,600 2025-04-17
Unclassified MEDIUM 6.5
CVE-2025-23906

Missing Authorization vulnerability in wpseek WordPress Dashboard Tweeter allows Exploiting Incorrectly Configured Access Control Security Levels. Th…

Mitigation only
Fix from $1,600 2025-04-17
Unclassified MEDIUM 6.5
CVE-2025-23958

Missing Authorization vulnerability in FADI MED Editor Wysiwyg Background Color editor-wysiwyg-background-color allows Exploiting Incorrectly Configu…

Mitigation only
Fix from $1,600 2025-04-17
Poll Maker CRITICAL 9.8
CVE-2025-24577

Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This iss…

Fix: 5.5.1+
Fix from $2,300 2025-04-17
Unclassified MEDIUM 6.5
CVE-2025-24581

Missing Authorization vulnerability in Themefic Instantio instantio allows Exploiting Incorrectly Configured Access Control Security Levels.This issu…

Mitigation only
Fix from $1,600 2025-04-17
Unclassified MEDIUM 6.5
CVE-2025-23773

Missing Authorization vulnerability in mingocommerce Delete All Posts allows Exploiting Incorrectly Configured Access Control Security Levels. This …

Mitigation only
Fix from $1,600 2025-04-17
Unclassified MEDIUM 6.9
CVE-2025-31338

A missing authorization vulnerability in the retrieve teacher Information function of Wisdom Master Pro versions 5.0 through 5.2 allows remote attack…

Mitigation only
Fix from $1,600 2025-04-17
Unclassified MEDIUM 5.4
CVE-2025-39591

Missing Authorization vulnerability in WP Shuffle WP Subscription Forms wp-subscription-forms allows Exploiting Incorrectly Configured Access Control…

Mitigation only
Fix from $1,600 2025-04-16
Unclassified MEDIUM 5.4
CVE-2025-39560

Missing Authorization vulnerability in Shahjada Live Forms liveforms allows Exploiting Incorrectly Configured Access Control Security Levels.This iss…

Mitigation only
Fix from $1,600 2025-04-16
Unclassified MEDIUM 5.4
CVE-2025-39545

Missing Authorization vulnerability in miniOrange WordPress REST API Authentication wp-rest-api-authentication allows Exploiting Incorrectly Configur…

Mitigation only
Fix from $1,600 2025-04-16
Unclassified MEDIUM 5.4
CVE-2025-39552

Missing Authorization vulnerability in Dylan James Zephyr Project Manager zephyr-project-manager allows Exploiting Incorrectly Configured Access Cont…

Mitigation only
Fix from $1,600 2025-04-16
Unclassified MEDIUM 5.3
CVE-2025-39531

Missing Authorization vulnerability in slazzercom Slazzer Background Changer slazzer-background-changer allows Accessing Functionality Not Properly C…

Mitigation only
Fix from $1,600 2025-04-16
Unclassified MEDIUM 5.4
CVE-2025-39522

Missing Authorization vulnerability in Service2Client LLC Dynamic Post dynamic-post allows Exploiting Incorrectly Configured Access Control Security …

Mitigation only
Fix from $1,600 2025-04-16