Vulnerability index

Browse CVEs

6,923 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Missing AuthorizationCWE-862 × clear
Unclassified MEDIUM 5.4
CVE-2024-37483

Missing Authorization vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through <= 7.7.4.

Mitigation only
Fix from $1,600 2024-11-01
Business One Page MEDIUM 5.4
CVE-2024-37505

Missing Authorization vulnerability in Rara Themes Business One Page allows Exploiting Incorrectly Configured Access Control Security Levels.This iss…

Fix: 1.3.0+
Fix from $1,600 2024-11-01
Unclassified MEDIUM 5.3
CVE-2024-37475

Missing Authorization vulnerability in Automattic Newspack Newsletters allows Accessing Functionality Not Properly Constrained by ACLs.This issue aff…

Mitigation only
Fix from $1,600 2024-11-01
Unclassified MEDIUM 6.5
CVE-2024-37477

Missing Authorization vulnerability in Automattic Newspack Content Converter allows Exploiting Incorrectly Configured Access Control Security Levels.…

Mitigation only
Fix from $1,600 2024-11-01
Crm Perks Forms CRITICAL 9.8
CVE-2024-37463

Missing Authorization vulnerability in CRM Perks CRM Perks Forms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects C…

Fix: 1.1.6+
Fix from $2,300 2024-11-01
Unclassified MEDIUM 5.3
CVE-2024-37468

Missing Authorization vulnerability in blazethemes Newsmatic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec…

Mitigation only
Fix from $1,600 2024-11-01
Woffice CRITICAL 9.8
CVE-2024-37470

Missing Authorization vulnerability in WofficeIO Woffice Core allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Woff…

Fix: 5.4.9+
Fix from $2,300 2024-11-01
Defender CRITICAL 9.8
CVE-2024-37444

Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Defender Security defender-security.This issue affects Defender …

Fix: 4.7.3+
Fix from $2,300 2024-11-01
Profilegrid HIGH 8.8
CVE-2024-37453

Missing Authorization vulnerability in ProfileGrid User Profiles ProfileGrid allows Exploiting Incorrectly Configured Access Control Security Levels.…

Fix: 5.8.8+
Fix from $1,950 2024-11-01
Unclassified MEDIUM 5.3
CVE-2024-37456

Missing Authorization vulnerability in Noptin Newsletter Noptin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects No…

Mitigation only
Fix from $1,600 2024-11-01
Unclassified MEDIUM 5.4
CVE-2024-37425

Missing Authorization vulnerability in Automattic Newspack Blocks newspack-blocks allows Exploiting Incorrectly Configured Access Control Security Le…

No fix yet
Fix from $1,600 2024-11-01
Unclassified MEDIUM 5.3
CVE-2024-37427

Missing Authorization vulnerability in Arraytics Timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects …

No fix yet
Fix from $1,600 2024-11-01
Unclassified MEDIUM 5.4
CVE-2024-37439

Missing Authorization vulnerability in Uncanny Owl Uncanny Toolkit Pro for LearnDash allows Exploiting Incorrectly Configured Access Control Security…

Mitigation only
Fix from $1,600 2024-11-01
Unclassified MEDIUM 5.3
CVE-2024-37276

Missing Authorization vulnerability in fifu.App Featured Image from URL allows Exploiting Incorrectly Configured Access Control Security Levels.This …

Mitigation only
Fix from $1,600 2024-11-01
Unclassified MEDIUM 5.3
CVE-2024-37411

Missing Authorization vulnerability in Progress Planner Progress Planner progress-planner.This issue affects Progress Planner: from n/a through <= 0.…

Mitigation only
Fix from $1,600 2024-11-01
E2pdf MEDIUM 5.4
CVE-2024-37415

Missing Authorization vulnerability in E2Pdf e2pdf e2pdf.This issue affects e2pdf: from n/a through <= 1.20.27.

Fix: 1.23.00+
Fix from $1,600 2024-11-01
Unclassified MEDIUM 5.4
CVE-2024-37250

Missing Authorization vulnerability in WPEngine Inc. Advanced Custom Fields PRO allows Exploiting Incorrectly Configured Access Control Security Leve…

Mitigation only
Fix from $1,600 2024-11-01
Elements Kit Elementor Addons MEDIUM 5.3
CVE-2024-37255

Missing Authorization vulnerability in Roxnor ElementsKit Elementor addons Lite elementskit-lite.This issue affects ElementsKit Elementor addons Lite…

Fix: 3.2.0+
Fix from $1,600 2024-11-01
Unclassified MEDIUM 5.3
CVE-2024-37269

Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets allows Exploiting Incorrectly Configured Access Control Security …

Mitigation only
Fix from $1,600 2024-11-01
Unclassified MEDIUM 5.3
CVE-2024-37220

Missing Authorization vulnerability in OptinlyHQ Optinly allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects O…

Mitigation only
Fix from $1,600 2024-11-01
Unclassified MEDIUM 5.3
CVE-2024-37226

Missing Authorization vulnerability in Kanban for WordPress Kanban Boards for WordPress allows Exploiting Incorrectly Configured Access Control Secur…

Mitigation only
Fix from $1,600 2024-11-01
Unclassified HIGH 8.8
CVE-2024-37232

Missing Authorization vulnerability in Hercules Design Hercules Core allows Exploiting Incorrectly Configured Access Control Security Levels.This iss…

Mitigation only
Fix from $1,950 2024-11-01
Unclassified MEDIUM 5.4
CVE-2024-37207

Missing Authorization vulnerability in Theme4Press Demo Awesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af…

No fix yet
Fix from $1,600 2024-11-01
Unclassified MEDIUM 6.5
CVE-2024-37209

Access Control vulnerability in Prism IT Systems User Rights Access Manager allows . This issue affects User Rights Access Manager: from n/a through…

No fix yet
Fix from $1,600 2024-11-01
Unclassified MEDIUM 6.5
CVE-2024-37214

Missing Authorization vulnerability in Dropshipping Guru Ali2Woo Lite Exploiting Incorrectly Configured Access Control Security Levels, Stored XSS.Th…

Mitigation only
Fix from $1,600 2024-11-01
Uncanny Automator CRITICAL 9.8
CVE-2024-37119

Missing Authorization vulnerability in Uncanny Owl Uncanny Automator Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This…

Fix: 5.3.0.1+
Fix from $2,300 2024-11-01
Unclassified MEDIUM 5.3
CVE-2024-37123

Missing Authorization vulnerability in VowelWeb Ibtana allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ibt…

Mitigation only
Fix from $1,600 2024-11-01
Unclassified HIGH 8.2
CVE-2024-37106

Missing Authorization vulnerability in WishList Products WishList Member X allows Exploiting Incorrectly Configured Access Control Security Levels.Th…

Mitigation only
Fix from $1,950 2024-11-01
Masterstudy Lms CRITICAL 9.8
CVE-2024-37094

Missing Authorization vulnerability in StylemixThemes MasterStudy LMS allows Exploiting Incorrectly Configured Access Control Security Levels. This …

Fix: 3.2.13+
Fix from $2,300 2024-11-01
Office Anywhere MEDIUM 6.5
CVE-2024-10598

A vulnerability classified as critical was found in Tongda OA 11.2/11.3/11.4/11.5/11.6. This vulnerability affects unknown code of the file general/h…

Fix: after 11.6
Fix from $1,600 2024-10-31