Vulnerability index

Browse CVEs

6,923 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Missing AuthorizationCWE-862 × clear
Uncanny Automator HIGH 8.8
CVE-2025-2075

The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin for WordPress is vulnerable to Privilege Escalation in all v…

Fix: 6.4+
Fix from $1,950 2025-04-04
Unclassified HIGH 7.5
CVE-2025-31909

Missing Authorization vulnerability in Apptivo Apptivo Business Site CRM apptivo-business-site allows Exploiting Incorrectly Configured Access Contro…

Mitigation only
Fix from $1,950 2025-04-03
Unclassified MEDIUM 6.5
CVE-2025-31858

Missing Authorization vulnerability in matthewrubin Local Magic local-magic allows Exploiting Incorrectly Configured Access Control Security Levels.T…

No fix yet
Fix from $1,600 2025-04-03
Unclassified MEDIUM 5.8
CVE-2025-31876

Missing Authorization vulnerability in gunnarpayday Payday payday allows Exploiting Incorrectly Configured Access Control Security Levels.This issue …

No fix yet
Fix from $1,600 2025-04-03
Unclassified MEDIUM 6.5
CVE-2025-31896

Missing Authorization vulnerability in istmoplugins GetBookingsWP get-bookings-wp allows Exploiting Incorrectly Configured Access Control Security Le…

Mitigation only
Fix from $1,600 2025-04-03
Unclassified MEDIUM 6.3
CVE-2025-31841

Missing Authorization vulnerability in Frank P. Walentynowicz FPW Category Thumbnails fpw-category-thumbnails allows Exploiting Incorrectly Configure…

Mitigation only
Fix from $1,600 2025-04-03
Unclassified MEDIUM 6.5
CVE-2025-31758

Missing Authorization vulnerability in BinaryCarpenter Free Woocommerce Product Table View free-product-table-for-woocommerce allows Exploiting Incor…

Mitigation only
Fix from $1,600 2025-04-03
Unclassified MEDIUM 6.5
CVE-2025-31768

Missing Authorization vulnerability in OTWthemes Widget Manager Light widget-manager-light allows Accessing Functionality Not Properly Constrained by…

Mitigation only
Fix from $1,600 2025-04-03
Unclassified MEDIUM 6.5
CVE-2025-31789

Missing Authorization vulnerability in Matat Technologies TextMe SMS textme-sms-integration allows Exploiting Incorrectly Configured Access Control S…

No fix yet
Fix from $1,600 2025-04-03
Unclassified MEDIUM 5.4
CVE-2025-31794

Missing Authorization vulnerability in Web Ready Now WR Price List Manager For Woocommerce wr-price-list-for-woocommerce allows Exploiting Incorrectl…

Mitigation only
Fix from $1,600 2025-04-03
Unclassified MEDIUM 6.5
CVE-2025-31795

Missing Authorization vulnerability in Plugin Devs Shopify to WooCommerce Migration migrate-shopify-to-woocommerce allows Exploiting Incorrectly Conf…

Mitigation only
Fix from $1,600 2025-04-03
Unclassified MEDIUM 6.5
CVE-2025-31729

Missing Authorization vulnerability in jeffikus WooTumblog woo-tumblog allows Exploiting Incorrectly Configured Access Control Security Levels.This i…

Mitigation only
Fix from $1,600 2025-04-03
Unclassified MEDIUM 6.5
CVE-2025-31736

Missing Authorization vulnerability in richtexteditor Rich Text Editor richtexteditor allows Exploiting Incorrectly Configured Access Control Securit…

Mitigation only
Fix from $1,600 2025-04-03
Unclassified MEDIUM 6.4
CVE-2025-31739

Missing Authorization vulnerability in Manuel Schmalstieg Minimalistic Event Manager minimalistic-event-manager allows Exploiting Incorrectly Configu…

Mitigation only
Fix from $1,600 2025-04-03
Unclassified MEDIUM 6.4
CVE-2025-31746

Missing Authorization vulnerability in Think201 Clients clients allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af…

Mitigation only
Fix from $1,600 2025-04-03
Unclassified MEDIUM 6.5
CVE-2025-31581

Missing Authorization vulnerability in Sandeep Kumar WP Video Playlist wp-video-playlist allows Exploiting Incorrectly Configured Access Control Secu…

Mitigation only
Fix from $1,600 2025-04-03
Unclassified MEDIUM 6.5
CVE-2025-31541

Missing Authorization vulnerability in TuriTop TuriTop Booking System turitop-booking-system allows Exploiting Incorrectly Configured Access Control …

Mitigation only
Fix from $1,600 2025-04-03
Unclassified MEDIUM 6.5
CVE-2025-30915

Missing Authorization vulnerability in enituretechnology Small Package Quotes – Worldwide Express Edition small-package-quotes-wwe-edition allows Exp…

Mitigation only
Fix from $1,600 2025-04-03
Unclassified MEDIUM 6.5
CVE-2025-30916

Missing Authorization vulnerability in enituretechnology Residential Address Detection residential-address-detection allows Exploiting Incorrectly Co…

Mitigation only
Fix from $1,600 2025-04-03
Unclassified HIGH 8.8
CVE-2025-3063

The Shopper Approved Reviews plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a m…

Mitigation only
Fix from $1,950 2025-04-02
Unclassified MEDIUM 6.5
CVE-2024-13637

The Demo Awesome plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the install_plugin func…

Mitigation only
Fix from $1,600 2025-04-02
Unclassified MEDIUM 6.5
CVE-2025-2779

The Insert Headers and Footers Code – HT Script plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability c…

Mitigation only
Fix from $1,600 2025-04-02
Unclassified HIGH 7.5
CVE-2025-31580

Missing Authorization vulnerability in Anzar Ahmed Ni WooCommerce Product Enquiry ni-woocommerce-product-enquiry allows Accessing Functionality Not P…

Mitigation only
Fix from $1,950 2025-04-01
Unclassified MEDIUM 5.3
CVE-2025-31628

Missing Authorization vulnerability in SlicedInvoices Sliced Invoices sliced-invoices allows Exploiting Incorrectly Configured Access Control Securit…

Mitigation only
Fix from $1,600 2025-04-01
Unclassified HIGH 8.8
CVE-2025-30825

Missing Authorization vulnerability in WPClever WPC Smart Linked Products - Upsells & Cross-sells for WooCommerce wpc-smart-linked-products allows Pr…

Mitigation only
Fix from $1,950 2025-04-01
Unclassified MEDIUM 5.4
CVE-2025-30853

Missing Authorization vulnerability in ShortPixel ShortPixel Adaptive Images shortpixel-adaptive-images allows Exploiting Incorrectly Configured Acce…

Mitigation only
Fix from $1,600 2025-04-01
Unclassified MEDIUM 5.4
CVE-2025-31878

Missing Authorization vulnerability in Dmitry V. (CEO of "UKR Solution") UPC/EAN/GTIN Code Generator upc-ean-barcode-generator allows Exploiting Inco…

No fix yet
Fix from $1,600 2025-04-01
Unclassified MEDIUM 5.4
CVE-2025-31879

Missing Authorization vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Generator for WooCommerce embedding-barcodes-into-product-pages-and-…

Mitigation only
Fix from $1,600 2025-04-01
Unclassified MEDIUM 5.4
CVE-2025-31881

Missing Authorization vulnerability in Stylemix Pearl pearl-header-builder allows Exploiting Incorrectly Configured Access Control Security Levels.Th…

Mitigation only
Fix from $1,600 2025-04-01
Unclassified MEDIUM 5.4
CVE-2025-31870

Missing Authorization vulnerability in EXEIdeas International WP AutoKeyword wp-autokeyword allows Exploiting Incorrectly Configured Access Control S…

Mitigation only
Fix from $1,600 2025-04-01