Vulnerability index

Browse CVEs

6,913 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Missing AuthorizationCWE-862 × clear
Unclassified MEDIUM 6.5
CVE-2025-68072

Missing Authorization vulnerability in Merv Barrett Easy Property Listings easy-property-listings allows Exploiting Incorrectly Configured Access Con…

Mitigation only
Fix from $1,600 2026-01-22
Unclassified CRITICAL 9.4
CVE-2025-68018

Missing Authorization vulnerability in StackWC Order Listener for WooCommerce woc-order-alert allows Exploiting Incorrectly Configured Access Control…

Mitigation only
Fix from $2,300 2026-01-22
Unclassified MEDIUM 6.5
CVE-2025-68019

Missing Authorization vulnerability in cleverplugins SEO Booster seo-booster allows Exploiting Incorrectly Configured Access Control Security Levels.…

Mitigation only
Fix from $1,600 2026-01-22
Unclassified MEDIUM 6.5
CVE-2025-68020

Missing Authorization vulnerability in WANotifier Notifier notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issu…

Mitigation only
Fix from $1,600 2026-01-22
Unclassified MEDIUM 6.5
CVE-2025-68009

Missing Authorization vulnerability in Codeless Slider Templates slider-templates allows Accessing Functionality Not Properly Constrained by ACLs.Thi…

Mitigation only
Fix from $1,600 2026-01-22
Unclassified MEDIUM 6.5
CVE-2025-68013

Missing Authorization vulnerability in cardpaysolutions Payment Gateway Authorize.Net CIM for WooCommerce authnet-cim-for-woo allows Exploiting Incor…

Mitigation only
Fix from $1,600 2026-01-22
Unclassified MEDIUM 6.5
CVE-2025-68016

Missing Authorization vulnerability in Onepay Sri Lanka onepay Payment Gateway For WooCommerce onepay-payment-gateway-for-woocommerce allows Exploiti…

Mitigation only
Fix from $1,600 2026-01-22
Unclassified HIGH 7.6
CVE-2025-67967

Missing Authorization vulnerability in e-plugins Lawyer Directory lawyer-directory allows Exploiting Incorrectly Configured Access Control Security L…

Mitigation only
Fix from $1,950 2026-01-22
Unclassified MEDIUM 6.5
CVE-2025-68003

Missing Authorization vulnerability in renatoatshown Shown Connector shown-connector allows Exploiting Incorrectly Configured Access Control Security…

Mitigation only
Fix from $1,600 2026-01-22
Unclassified MEDIUM 6.5
CVE-2025-68007

Missing Authorization vulnerability in Event Espresso Event Espresso 4 Decaf event-espresso-decaf allows Exploiting Incorrectly Configured Access Con…

Mitigation only
Fix from $1,600 2026-01-22
Unclassified HIGH 8.2
CVE-2025-67956

Missing Authorization vulnerability in wpeverest User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security…

Mitigation only
Fix from $1,950 2026-01-22
Unclassified MEDIUM 6.5
CVE-2025-67958

Missing Authorization vulnerability in Taxcloud TaxCloud for WooCommerce simple-sales-tax allows Exploiting Incorrectly Configured Access Control Sec…

No fix yet
Fix from $1,600 2026-01-22
Unclassified MEDIUM 6.5
CVE-2025-67942

Missing Authorization vulnerability in peachpayments Peach Payments Gateway wc-peach-payments-gateway allows Exploiting Incorrectly Configured Access…

Mitigation only
Fix from $1,600 2026-01-22
Unclassified MEDIUM 6.5
CVE-2025-67939

Missing Authorization vulnerability in Tickera Tickera tickera-event-ticketing-system allows Exploiting Incorrectly Configured Access Control Securit…

Mitigation only
Fix from $1,600 2026-01-22
Unclassified MEDIUM 5.4
CVE-2025-66141

Missing Authorization vulnerability in merkulove Scroller scroller allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…

No fix yet
Fix from $1,600 2026-01-22
Unclassified MEDIUM 5.4
CVE-2025-66142

Missing Authorization vulnerability in merkulove Comparimager for Elementor comparimager-elementor allows Exploiting Incorrectly Configured Access Co…

Mitigation only
Fix from $1,600 2026-01-22
Unclassified MEDIUM 5.4
CVE-2025-66143

Missing Authorization vulnerability in merkulove Crumber crumber-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.Th…

Mitigation only
Fix from $1,600 2026-01-22
Unclassified MEDIUM 5.4
CVE-2025-66135

Missing Authorization vulnerability in merkulove Imager for Elementor imager-elementor allows Exploiting Incorrectly Configured Access Control Securi…

Mitigation only
Fix from $1,600 2026-01-22
Unclassified MEDIUM 5.4
CVE-2025-66136

Missing Authorization vulnerability in merkulove Carter for Elementor carter-elementor allows Exploiting Incorrectly Configured Access Control Securi…

Mitigation only
Fix from $1,600 2026-01-22
Unclassified MEDIUM 5.4
CVE-2025-66137

Missing Authorization vulnerability in merkulove Searcher for Elementor searcher-elementor allows Exploiting Incorrectly Configured Access Control Se…

Mitigation only
Fix from $1,600 2026-01-22
Unclassified MEDIUM 5.4
CVE-2025-66138

Missing Authorization vulnerability in merkulove Motionger for Elementor motionger-elementor allows Exploiting Incorrectly Configured Access Control …

Mitigation only
Fix from $1,600 2026-01-22
Unclassified MEDIUM 5.4
CVE-2025-66139

Missing Authorization vulnerability in merkulove Audier For Elementor audier-elementor allows Exploiting Incorrectly Configured Access Control Securi…

Mitigation only
Fix from $1,600 2026-01-22
Unclassified MEDIUM 5.4
CVE-2025-66140

Missing Authorization vulnerability in merkulove Uper for Elementor uper-elementor allows Exploiting Incorrectly Configured Access Control Security L…

Mitigation only
Fix from $1,600 2026-01-22
Unclassified MEDIUM 5.4
CVE-2025-62106

Missing Authorization vulnerability in Mario Peshev WP-CRM System wp-crm-system allows Exploiting Incorrectly Configured Access Control Security Leve…

Mitigation only
Fix from $1,600 2026-01-22
Unclassified MEDIUM 5.3
CVE-2025-62754

Missing Authorization vulnerability in Kapil Paul Payment Gateway bKash for WC woo-payment-bkash allows Exploiting Incorrectly Configured Access Cont…

Mitigation only
Fix from $1,600 2026-01-22
Unclassified MEDIUM 6.5
CVE-2025-5805

Missing Authorization vulnerability in Ninetheme Electron electron allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…

No fix yet
Fix from $1,600 2026-01-22
Unclassified MEDIUM 6.5
CVE-2025-54002

Missing Authorization vulnerability in Jthemes xSmart xsmart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec…

Mitigation only
Fix from $1,600 2026-01-22
Unclassified MEDIUM 5.4
CVE-2025-49375

Missing Authorization vulnerability in cozythemes HomeLancer homelancer allows Exploiting Incorrectly Configured Access Control Security Levels.This …

Mitigation only
Fix from $1,600 2026-01-22
Typebot HIGH 7.4
CVE-2025-65098

Typebot is an open-source chatbot builder. In versions prior to 3.13.2, client-side script execution in Typebot allows stealing all stored credential…

Fix: 3.13.2+
Fix from $1,950 2026-01-22
Appsmith CRITICAL 9.8
CVE-2026-24042

Appsmith is a platform to build admin panels, internal tools, and dashboards. In versions 1.94 and below, publicly accessible apps allow unauthentica…

Fix: after 1.94
Fix from $2,300 2026-01-22