Missing Authorization — CVEs by weakness type

Unclassified MEDIUM 6.5

CVE-2025-60088

Missing Authorization vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-ignition allows Exploiting Incorrectly Configured Access Cont…

Mitigation only

Fix from $1,600 2025-12-18

Unclassified HIGH 7.5

CVE-2025-60077

Missing Authorization vulnerability in YayCommerce YayPricing yaypricing allows Accessing Functionality Not Properly Constrained by ACLs.This issue a…

Mitigation only

Fix from $1,950 2025-12-18

Unclassified HIGH 7.5

CVE-2025-60045

Missing Authorization vulnerability in ThemeAtelier IDonatePro idonate-pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue…

Mitigation only

Fix from $1,950 2025-12-18

Unclassified HIGH 7.5

CVE-2025-58938

Missing Authorization vulnerability in ThemeAtelier IDonatePro idonate-pro allows Exploiting Incorrectly Configured Access Control Security Levels.Th…

Mitigation only

Fix from $1,950 2025-12-18

Unclassified HIGH 7.5

CVE-2025-58877

Missing Authorization vulnerability in javothemes Javo Core javo-core allows Exploiting Incorrectly Configured Access Control Security Levels.This is…

Mitigation only

Fix from $1,950 2025-12-18

Unclassified MEDIUM 6.5

CVE-2025-54745

Missing Authorization vulnerability in miniOrange miniOrange's Google Authenticator miniorange-2-factor-authentication allows Exploiting Incorrectly …

Mitigation only

Fix from $1,600 2025-12-18

Unclassified HIGH 7.1

CVE-2025-54751

Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a…

Mitigation only

Fix from $1,950 2025-12-18

Unclassified MEDIUM 6.5

CVE-2025-54741

Missing Authorization vulnerability in Tyler Moore Super Blank super-blank allows Exploiting Incorrectly Configured Access Control Security Levels.Th…

Mitigation only

Fix from $1,600 2025-12-18

Unclassified MEDIUM 5.8

CVE-2025-54743

Missing Authorization vulnerability in mkscripts Download After Email download-after-email allows Exploiting Incorrectly Configured Access Control Se…

Mitigation only

Fix from $1,600 2025-12-18

Unclassified MEDIUM 6.5

CVE-2025-49902

Missing Authorization vulnerability in A WP Life Login Page Customizer – Customizer Login Page, Admin Page, Custom Design customizer-login-page allow…

Mitigation only

Fix from $1,600 2025-12-18

Unclassified MEDIUM 6.5

CVE-2025-49041

Missing Authorization vulnerability in The African Boss Get Cash get-cash allows Exploiting Incorrectly Configured Access Control Security Levels.Thi…

No fix yet

Fix from $1,600 2025-12-18

Ulicms CRITICAL 9.8

CVE-2023-53923

UliCMS 2023.1 contains a privilege escalation vulnerability that allows unauthenticated attackers to create administrative accounts through the UserC…

Mitigation only

Fix from $2,300 2025-12-17

Unclassified MEDIUM 5.3

CVE-2025-14061

The Cookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent plugin for WordPress i…

Mitigation only

Fix from $1,600 2025-12-17

Hios MEDIUM 6.5

CVE-2025-14817

The component com.transsion.tranfacmode.entrance.main.MainActivity in com.transsion.tranfacmode has no permission control and can be accessed by thir…

Mitigation only

Fix from $1,600 2025-12-17

Unclassified MEDIUM 6.5

CVE-2025-13880

The WP Social Ninja – Embed Social Feeds, Customer Reviews, Chat Widgets (Google Reviews, YouTube Feed, Photo Feeds, and More) plugin for WordPress i…

Mitigation only

Fix from $1,600 2025-12-17

Unclassified CRITICAL 9.9

CVE-2025-68270

The Open edX Platform is a learning management platform. Prior to commit 05d0d0936daf82c476617257aa6c35f0cd4ca060, CourseLimitedStaffRole users are a…

Patch available

Fix from $2,300 2025-12-16

Unclassified MEDIUM 6.3

CVE-2025-0836

Missing Authorization vulnerability in Milestone Systems XProtect VMS allows users with read-only access to Management Server to have full read/write…

Mitigation only