Vulnerability index

Browse CVEs

6,913 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Missing AuthorizationCWE-862 × clear
Unclassified MEDIUM 5.3
CVE-2025-68595

Missing Authorization vulnerability in Trustindex Widgets for Social Photo Feed social-photo-feed-widget allows Exploiting Incorrectly Configured Acc…

Mitigation only
Fix from $1,600 2025-12-24
Unclassified MEDIUM 5.3
CVE-2025-68579

Missing Authorization vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Exploiting Incorrectly Configured Access Control Secu…

Mitigation only
Fix from $1,600 2025-12-24
Unclassified MEDIUM 5.4
CVE-2025-68581

Missing Authorization vulnerability in YITHEMES YITH Slider for page builders yith-slider-for-page-builders allows Exploiting Incorrectly Configured …

Mitigation only
Fix from $1,600 2025-12-24
Unclassified MEDIUM 5.3
CVE-2025-68582

Missing Authorization vulnerability in Funnelforms Funnelforms Free funnelforms-free allows Exploiting Incorrectly Configured Access Control Security…

Mitigation only
Fix from $1,600 2025-12-24
Unclassified MEDIUM 5.3
CVE-2025-68586

Missing Authorization vulnerability in Gora Tech Cooked cooked allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff…

Mitigation only
Fix from $1,600 2025-12-24
Unclassified MEDIUM 5.3
CVE-2025-68571

Missing Authorization vulnerability in SALESmanago SALESmanago & Leadoo salesmanago allows Exploiting Incorrectly Configured Access Control Security …

Mitigation only
Fix from $1,600 2025-12-24
Unclassified MEDIUM 5.3
CVE-2025-68572

Missing Authorization vulnerability in Spider Themes BBP Core bbp-core allows Exploiting Incorrectly Configured Access Control Security Levels.This i…

Mitigation only
Fix from $1,600 2025-12-24
Unclassified MEDIUM 5.3
CVE-2025-68575

Missing Authorization vulnerability in Wappointment team Wappointment wappointment allows Exploiting Incorrectly Configured Access Control Security L…

Mitigation only
Fix from $1,600 2025-12-24
Unclassified MEDIUM 5.3
CVE-2025-68578

Missing Authorization vulnerability in Addonify Addonify addonify-quick-view allows Exploiting Incorrectly Configured Access Control Security Levels.…

Mitigation only
Fix from $1,600 2025-12-24
Unclassified MEDIUM 5.3
CVE-2025-68565

Missing Authorization vulnerability in JayBee Twitch Player ttv-easy-embed-player allows Exploiting Incorrectly Configured Access Control Security Le…

No fix yet
Fix from $1,600 2025-12-24
Unclassified MEDIUM 5.3
CVE-2025-68568

Missing Authorization vulnerability in Claspo Popup Builders Claspo – Popups, Spin the Wheel & Email Capture claspo allows Exploiting Incorrectly Con…

Mitigation only
Fix from $1,600 2025-12-24
Unclassified MEDIUM 6.5
CVE-2025-68569

Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows Exploiting Incorrectly Configured Acce…

Mitigation only
Fix from $1,600 2025-12-24
Unclassified MEDIUM 5.4
CVE-2025-68517

Missing Authorization vulnerability in Essekia Tablesome tablesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…

Mitigation only
Fix from $1,600 2025-12-24
Unclassified MEDIUM 5.3
CVE-2025-68521

Missing Authorization vulnerability in wpstream WpStream wpstream allows Exploiting Incorrectly Configured Access Control Security Levels.This issue …

No fix yet
Fix from $1,600 2025-12-24
Unclassified MEDIUM 5.3
CVE-2025-68505

Missing Authorization vulnerability in icc0rz H5P h5p allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects H5P:…

Mitigation only
Fix from $1,600 2025-12-24
Unclassified MEDIUM 5.3
CVE-2025-68508

Missing Authorization vulnerability in Brave Brave brave-popup-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This i…

No fix yet
Fix from $1,600 2025-12-24
Unclassified MEDIUM 6.5
CVE-2025-68511

Missing Authorization vulnerability in Jegstudio Gutenverse Form gutenverse-form allows Exploiting Incorrectly Configured Access Control Security Lev…

Mitigation only
Fix from $1,600 2025-12-24
Unclassified MEDIUM 6.5
CVE-2023-40679

Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor allows Exploiting Incorrectly Configured Access Control Security Level…

Mitigation only
Fix from $1,600 2025-12-24
Unclassified MEDIUM 5.3
CVE-2025-68556

Missing Authorization vulnerability in VillaTheme HAPPY happy-helpdesk-support-ticket-system allows Exploiting Incorrectly Configured Access Control …

Mitigation only
Fix from $1,600 2025-12-23
Unclassified HIGH 7.5
CVE-2024-24844

Missing Authorization vulnerability in IdeaBox Creations PowerPack Pro for Elementor allows Exploiting Incorrectly Configured Access Control Security…

Mitigation only
Fix from $1,950 2025-12-23
Premium Addons For Elementor MEDIUM 5.3
CVE-2025-14155

The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to unauthorized access of data due to a …

Fix: 4.11.54+
Fix from $1,600 2025-12-23
Unclassified HIGH 8.1
CVE-2025-12934

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capab…

Mitigation only
Fix from $1,950 2025-12-23
Youlai Boot HIGH 7.5
CVE-2025-66735

youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The getRoleForm function in SysRoleController.java does not perform permission checks,…

Patch available
Fix from $1,950 2025-12-22
Youlai Boot HIGH 7.1
CVE-2025-66736

youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The importUsers function in SysUserController.java does not perform a permission check…

Patch available
Fix from $1,950 2025-12-22
Unclassified MEDIUM 5.3
CVE-2025-14043

The Tainacan plugin for WordPress is vulnerable to unauthorized metadata section creation due to missing authorization checks in all versions up to, …

Mitigation only
Fix from $1,600 2025-12-21
Unclassified MEDIUM 5.3
CVE-2025-14080

The Frontend Post Submission Manager Lite plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.2.5. Th…

Mitigation only
Fix from $1,600 2025-12-21
Unclassified HIGH 7.5
CVE-2025-12980

The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to unauthorized access of data due to a …

Mitigation only
Fix from $1,950 2025-12-21
Unclassified MEDIUM 5.4
CVE-2023-25445

Missing Authorization vulnerability in HappyFiles HappyFiles Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a…

No fix yet
Fix from $1,600 2025-12-21
Unclassified HIGH 7.7
CVE-2023-25446

Missing Authorization vulnerability in HappyFiles HappyFiles Pro happyfiles-pro allows Exploiting Incorrectly Configured Access Control Security Leve…

Mitigation only
Fix from $1,950 2025-12-21
Unclassified HIGH 7.6
CVE-2025-7782

The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to unauthorized modification of data due to a missing capability chec…

Mitigation only
Fix from $1,950 2025-12-20