Vulnerability index

Browse CVEs

6,913 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Missing AuthorizationCWE-862 × clear
Unclassified MEDIUM 5.4
CVE-2025-66154

Missing Authorization vulnerability in merkulove Couponer for Elementor couponer-elementor allows Exploiting Incorrectly Configured Access Control Se…

Mitigation only
Fix from $1,600 2025-12-31
Vireo HIGH 8.8
CVE-2025-62751

Missing Authorization vulnerability in extendthemes Vireo vireo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af…

Fix: after 1.0.24
Fix from $1,950 2025-12-31
Unclassified MEDIUM 5.3
CVE-2025-62755

Missing Authorization vulnerability in GS Plugins GS Portfolio for Envato gs-envato-portfolio allows Exploiting Incorrectly Configured Access Control…

Mitigation only
Fix from $1,600 2025-12-31
Unclassified MEDIUM 5.3
CVE-2025-62747

Missing Authorization vulnerability in Aum Watcharapon Featured Image Generator featured-image-generator allows Exploiting Incorrectly Configured Acc…

Mitigation only
Fix from $1,600 2025-12-31
Unclassified MEDIUM 5.3
CVE-2025-62122

Missing Authorization vulnerability in solwininfotech Trash Duplicate and 301 Redirect trash-duplicate-and-301-redirect allows Exploiting Incorrectly…

Mitigation only
Fix from $1,600 2025-12-31
Unclassified MEDIUM 5.3
CVE-2025-62129

Missing Authorization vulnerability in Magnigenie RestroPress restropress allows Exploiting Incorrectly Configured Access Control Security Levels.Thi…

Mitigation only
Fix from $1,600 2025-12-31
Unclassified MEDIUM 5.3
CVE-2025-62092

Missing Authorization vulnerability in Wiremo Wiremo woo-reviews-by-wiremo allows Exploiting Incorrectly Configured Access Control Security Levels.Th…

Mitigation only
Fix from $1,600 2025-12-31
Unclassified MEDIUM 5.3
CVE-2025-62116

Missing Authorization vulnerability in quadlayers AI Copilot ai-copilot allows Exploiting Incorrectly Configured Access Control Security Levels.This …

Mitigation only
Fix from $1,600 2025-12-31
Unclassified MEDIUM 5.3
CVE-2025-49338

Missing Authorization vulnerability in Flowbox Flowbox flowbox allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff…

No fix yet
Fix from $1,600 2025-12-31
Unclassified MEDIUM 5.3
CVE-2025-62079

Missing Authorization vulnerability in Damian WP Export Categories & Taxonomies wp-export-categories-taxonomies allows Exploiting Incorrectly Configu…

Mitigation only
Fix from $1,600 2025-12-31
Small Crm HIGH 8.8
CVE-2025-15390

A security flaw has been discovered in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /admin/edit-user.php. The manipulation …

Fix: after 4.0
Fix from $1,950 2025-12-31
Unclassified MEDIUM 5.3
CVE-2025-63016

Missing Authorization vulnerability in quadlayers QuadLayers TikTok Feed wp-tiktok-feed allows Exploiting Incorrectly Configured Access Control Secur…

Mitigation only
Fix from $1,600 2025-12-31
Unclassified MEDIUM 5.3
CVE-2025-63022

Missing Authorization vulnerability in topdevs.net Simple Like Page simple-facebook-plugin allows Exploiting Incorrectly Configured Access Control Se…

Mitigation only
Fix from $1,600 2025-12-31
Unclassified MEDIUM 5.3
CVE-2025-63031

Missing Authorization vulnerability in WP Grids EasyTest convertpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issu…

Mitigation only
Fix from $1,600 2025-12-31
Unclassified MEDIUM 5.3
CVE-2025-62141

Missing Authorization vulnerability in Information Technology Wawp automation-web-platform allows Exploiting Incorrectly Configured Access Control Se…

Mitigation only
Fix from $1,600 2025-12-31
Unclassified MEDIUM 5.3
CVE-2025-62145

Missing Authorization vulnerability in NewClarity DMCA Protection Badge dmca-badge allows Exploiting Incorrectly Configured Access Control Security L…

Mitigation only
Fix from $1,600 2025-12-31
Unclassified MEDIUM 5.3
CVE-2025-62147

Missing Authorization vulnerability in nikmelnik Realbig realbig-media allows Exploiting Incorrectly Configured Access Control Security Levels.This i…

Mitigation only
Fix from $1,600 2025-12-31
Unclassified MEDIUM 5.4
CVE-2025-62888

Missing Authorization vulnerability in Marco Milesi WP Attachments wp-attachments allows Exploiting Incorrectly Configured Access Control Security Le…

Mitigation only
Fix from $1,600 2025-12-31
Unclassified MEDIUM 5.3
CVE-2025-63001

Missing Authorization vulnerability in nicdark Hotel Booking nd-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This …

Mitigation only
Fix from $1,600 2025-12-31
Unclassified MEDIUM 5.3
CVE-2025-62081

Missing Authorization vulnerability in Channelize.io Team Live Shopping & Shoppable Videos For WooCommerce live-shopping-video-streams allows Exploit…

Mitigation only
Fix from $1,600 2025-12-31
Unclassified MEDIUM 5.4
CVE-2025-62091

Missing Authorization vulnerability in Vollstart Serial Codes Generator and Validator with WooCommerce Support serial-codes-generator-and-validator a…

Mitigation only
Fix from $1,600 2025-12-31
Unclassified MEDIUM 5.4
CVE-2025-62098

Missing Authorization vulnerability in totalsoft Portfolio Gallery gallery-portfolio allows Exploiting Incorrectly Configured Access Control Security…

Mitigation only
Fix from $1,600 2025-12-31
Unclassified MEDIUM 5.4
CVE-2025-62108

Missing Authorization vulnerability in SaifuMak Add Custom Codes add-custom-codes allows Exploiting Incorrectly Configured Access Control Security Le…

Mitigation only
Fix from $1,600 2025-12-31
Unclassified MEDIUM 5.3
CVE-2025-49349

Missing Authorization vulnerability in Reuters News Agency Reuters Direct reuters-direct allows Exploiting Incorrectly Configured Access Control Secu…

Mitigation only
Fix from $1,600 2025-12-31
Unclassified MEDIUM 5.3
CVE-2025-62138

Missing Authorization vulnerability in cedcommerce WP Advanced PDF wp-advanced-pdf allows Exploiting Incorrectly Configured Access Control Security L…

Mitigation only
Fix from $1,600 2025-12-31
Unclassified MEDIUM 5.4
CVE-2025-62144

Missing Authorization vulnerability in Mohammed Kaludi Core Web Vitals & PageSpeed Booster core-web-vitals-pagespeed-booster allows Exploiting Incorr…

Mitigation only
Fix from $1,600 2025-12-31
Lan Controller Firmware CRITICAL 9.8
CVE-2023-54327

Tinycontrol LAN Controller 1.58a contains an authentication bypass vulnerability that allows unauthenticated attackers to change admin passwords thro…

Fix: after 1.58a
Fix from $2,300 2025-12-30
Unclassified MEDIUM 5.3
CVE-2025-66080

Missing Authorization vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent gdpr-cookie-consent allows Exploiting Incorr…

Mitigation only
Fix from $1,600 2025-12-30
Unclassified MEDIUM 5.3
CVE-2025-69093

Missing Authorization vulnerability in wpdesk ShopMagic shopmagic-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Le…

Mitigation only
Fix from $1,600 2025-12-30
Unclassified MEDIUM 5.3
CVE-2025-69027

Missing Authorization vulnerability in tychesoftwares Product Delivery Date for WooCommerce – Lite product-delivery-date-for-woocommerce-lite allows …

Mitigation only
Fix from $1,600 2025-12-30