Vulnerability index

Browse CVEs

6,913 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Missing AuthorizationCWE-862 × clear
Unclassified MEDIUM 5.3
CVE-2025-14633

The F70 Lead Document Download plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'file_downl…

Mitigation only
Fix from $1,600 2025-12-20
Unclassified MEDIUM 5.3
CVE-2025-12898

The Pretty Google Calendar plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the pgcal_ajax_hand…

Mitigation only
Fix from $1,600 2025-12-20
Unclassified MEDIUM 5.4
CVE-2025-14455

The Image Photo Gallery Final Tiles Grid plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.6.7. This…

Mitigation only
Fix from $1,600 2025-12-19
Unclassified MEDIUM 5.3
CVE-2025-13754

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin for WordPress is vulnerable to Sensitive Information Exposure in all v…

Mitigation only
Fix from $1,600 2025-12-19
Xperience HIGH 7.2
CVE-2020-36890

An access control bypass vulnerability in Kentico Xperience allows administrators to modify global administrator user privileges via unauthorized req…

Fix: after 12.0.60
Fix from $1,950 2025-12-18
Unclassified MEDIUM 6.5
CVE-2025-66058

Missing Authorization vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting Incorrectly Configured Access Control S…

Mitigation only
Fix from $1,600 2025-12-18
Unclassified MEDIUM 5.4
CVE-2025-62960

Missing Authorization vulnerability in sparklewpthemes Construction Light construction-light allows Exploiting Incorrectly Configured Access Control …

Mitigation only
Fix from $1,600 2025-12-18
Unclassified MEDIUM 5.4
CVE-2025-62961

Missing Authorization vulnerability in sparklewpthemes Sparkle FSE sparkle-fse allows Exploiting Incorrectly Configured Access Control Security Level…

Mitigation only
Fix from $1,600 2025-12-18
Unclassified MEDIUM 5.3
CVE-2025-63002

Missing Authorization vulnerability in wpforchurch Sermon Manager sermon-manager-for-wordpress allows Exploiting Incorrectly Configured Access Contro…

Mitigation only
Fix from $1,600 2025-12-18
Soliclub MEDIUM 5.4
CVE-2025-7047

Missing Authorization vulnerability in Utarit Informatics Services Inc. SoliClub allows Privilege Abuse. This issue affects SoliClub: before 5.3.7.

Fix: 5.3.7+
Fix from $1,600 2025-12-18
Sma6200 Firmware MEDIUM 6.6
CVE-2025-40602 KEV

A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).

Fix: 12.4.3-03245 / 12.5.0-02283+
Fix from $1,600 2025-12-18
Unclassified HIGH 8.8
CVE-2025-14364

The Demo Importer Plus plugin for WordPress is vulnerable to unauthorized modification of data, loss of data, and privilege escalation due to a missi…

Mitigation only
Fix from $1,950 2025-12-18
Unclassified MEDIUM 6.5
CVE-2025-66104

Missing Authorization vulnerability in Anton Vanyukov Offload, AI & Optimize with Cloudflare Images cf-images allows Exploiting Incorrectly Configure…

Mitigation only
Fix from $1,600 2025-12-18
Unclassified HIGH 7.5
CVE-2025-66117

Missing Authorization vulnerability in Ays Pro Easy Form easy-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…

Mitigation only
Fix from $1,950 2025-12-18
Unclassified HIGH 7.5
CVE-2025-66054

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This i…

Mitigation only
Fix from $1,950 2025-12-18
Unclassified MEDIUM 6.5
CVE-2025-66068

Missing Authorization vulnerability in InstaWP InstaWP Connect instawp-connect allows Exploiting Incorrectly Configured Access Control Security Level…

Mitigation only
Fix from $1,600 2025-12-18
Unclassified HIGH 7.5
CVE-2025-66070

Missing Authorization vulnerability in Tomdever wpForo Forum wpforo allows Exploiting Incorrectly Configured Access Control Security Levels.This issu…

Mitigation only
Fix from $1,950 2025-12-18
Unclassified HIGH 7.5
CVE-2025-66088

Missing Authorization vulnerability in Property Hive PropertyHive propertyhive allows Exploiting Incorrectly Configured Access Control Security Level…

Mitigation only
Fix from $1,950 2025-12-18
Unclassified MEDIUM 6.5
CVE-2025-66100

Missing Authorization vulnerability in Magnigenie RestroPress restropress allows Exploiting Incorrectly Configured Access Control Security Levels.Thi…

Mitigation only
Fix from $1,600 2025-12-18
Unclassified MEDIUM 6.5
CVE-2025-64375

Missing Authorization vulnerability in Mahmudul Hasan Arif WP Social Ninja wp-social-reviews allows Exploiting Incorrectly Configured Access Control …

Mitigation only
Fix from $1,600 2025-12-18
Unclassified HIGH 7.1
CVE-2025-64378

Missing Authorization vulnerability in CridioStudio ListingPro listingpro allows Exploiting Incorrectly Configured Access Control Security Levels.Thi…

Mitigation only
Fix from $1,950 2025-12-18
Unclassified HIGH 7.5
CVE-2025-64268

Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…

Mitigation only
Fix from $1,950 2025-12-18
Unclassified MEDIUM 6.5
CVE-2025-64273

Missing Authorization vulnerability in GetResponse Email marketing for WordPress by GetResponse Official getresponse-official allows Exploiting Incor…

Mitigation only
Fix from $1,600 2025-12-18
Unclassified HIGH 7.5
CVE-2025-64222

Missing Authorization vulnerability in FantasticPlugins WooCommerce Recover Abandoned Cart rac allows Exploiting Incorrectly Configured Access Contro…

Mitigation only
Fix from $1,950 2025-12-18
Unclassified HIGH 7.5
CVE-2025-64209

Missing Authorization vulnerability in StylemixThemes Masterstudy masterstudy allows Accessing Functionality Not Properly Constrained by ACLs.This is…

Mitigation only
Fix from $1,950 2025-12-18
Unclassified HIGH 7.5
CVE-2025-64214

Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro masterstudy-lms-learning-management-system-pro allows Accessing Functionali…

Mitigation only
Fix from $1,950 2025-12-18
Unclassified MEDIUM 6.3
CVE-2025-64192

Missing Authorization vulnerability in 8theme XStore xstore allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect…

Mitigation only
Fix from $1,600 2025-12-18
Unclassified MEDIUM 6.5
CVE-2025-63039

Missing Authorization vulnerability in CridioStudio ListingPro listingpro allows Exploiting Incorrectly Configured Access Control Security Levels.Thi…

Mitigation only
Fix from $1,600 2025-12-18
Unclassified HIGH 7.1
CVE-2025-60079

Missing Authorization vulnerability in bPlugins Parallax Section block parallax-section allows Accessing Functionality Not Properly Constrained by AC…

Mitigation only
Fix from $1,950 2025-12-18
Unclassified HIGH 7.5
CVE-2025-60086

Missing Authorization vulnerability in Matt WP Voting Contest wp-voting-contest allows Exploiting Incorrectly Configured Access Control Security Leve…

Mitigation only
Fix from $1,950 2025-12-18