Vulnerability index

Browse CVEs

6,923 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Missing AuthorizationCWE-862 × clear
Unclassified MEDIUM 5.4
CVE-2025-64212

Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro masterstudy-lms-learning-management-system-pro allows Exploiting Incorrectl…

Mitigation only
Fix from $1,600 2025-10-29
Unclassified MEDIUM 5.4
CVE-2025-64210

Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets masterstudy-elementor-widgets allows Exploiting Incorrectly Confi…

Mitigation only
Fix from $1,600 2025-10-29
Unclassified MEDIUM 5.3
CVE-2025-64199

Missing Authorization vulnerability in WpEstate wpresidence wpresidence allows Exploiting Incorrectly Configured Access Control Security Levels.This …

Mitigation only
Fix from $1,600 2025-10-29
Unclassified MEDIUM 5.3
CVE-2025-58711

Missing Authorization vulnerability in solwin Blog Designer PRO blog-designer-pro allows Accessing Functionality Not Properly Constrained by ACLs.Thi…

Mitigation only
Fix from $1,600 2025-10-29
GitLab HIGH 8.8
CVE-2025-11702

GitLab has remediated an issue in EE affecting all versions from 17.1 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allow…

Fix: 18.3.5 / 18.4.3+
Fix from $1,950 2025-10-29
Unclassified MEDIUM 6.5
CVE-2025-11705

The Anti-Malware Security and Brute-Force Firewall plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 4.…

Mitigation only
Fix from $1,600 2025-10-29
Unclassified MEDIUM 5.3
CVE-2025-64296

Missing Authorization vulnerability in Facebook Facebook for WooCommerce facebook-for-woocommerce allows Exploiting Incorrectly Configured Access Con…

Mitigation only
Fix from $1,600 2025-10-29
Tloc100 100 Firmware CRITICAL 9.8
CVE-2025-59461

A remote unauthenticated attacker may use the unauthenticated C++ API to access or modify sensitive data and disrupt services.

No fix yet
Fix from $2,300 2025-10-27
Unclassified MEDIUM 5.3
CVE-2025-62976

Missing Authorization vulnerability in Joovii Sendle Shipping official-sendle-shipping-method allows Accessing Functionality Not Properly Constrained…

Mitigation only
Fix from $1,600 2025-10-27
Unclassified MEDIUM 5.3
CVE-2025-62977

Missing Authorization vulnerability in 沃之涛 百度站长SEO合集(支持百度/神马/Bing/头条推送) baiduseo allows Accessing Functionality Not Properly Const…

Mitigation only
Fix from $1,600 2025-10-27
Unclassified MEDIUM 5.4
CVE-2025-62980

Missing Authorization vulnerability in MDZ Persian Admnin Fonts persian-admin-fonts allows Exploiting Incorrectly Configured Access Control Security …

Mitigation only
Fix from $1,600 2025-10-27
Unclassified MEDIUM 5.3
CVE-2025-62970

Missing Authorization vulnerability in Spencer Haws Link Whisper Free link-whisper allows Exploiting Incorrectly Configured Access Control Security L…

Mitigation only
Fix from $1,600 2025-10-27
Buddyforms MEDIUM 5.3
CVE-2025-62973

Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue af…

Fix: after 2.9.0
Fix from $1,600 2025-10-27
Unclassified MEDIUM 5.3
CVE-2025-62964

Missing Authorization vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Exploiting Incorrectly Configured Access Contro…

Mitigation only
Fix from $1,600 2025-10-27
Unclassified MEDIUM 5.5
CVE-2025-62965

Missing Authorization vulnerability in wpseek Admin Management Xtended admin-management-xtended allows Exploiting Incorrectly Configured Access Cont…

Mitigation only
Fix from $1,600 2025-10-27
Unclassified MEDIUM 5.4
CVE-2025-62966

Missing Authorization vulnerability in Apiki GoCache gocache-cdn allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a…

No fix yet
Fix from $1,600 2025-10-27
Unclassified MEDIUM 5.3
CVE-2025-62944

Missing Authorization vulnerability in Mark O'Donnell MSTW CSV EXPORTER mstw-csv-exporter allows Exploiting Incorrectly Configured Access Control Sec…

Mitigation only
Fix from $1,600 2025-10-27
Unclassified MEDIUM 5.3
CVE-2025-62946

Missing Authorization vulnerability in everestthemes Everest Backup everest-backup allows Exploiting Incorrectly Configured Access Control Security L…

Mitigation only
Fix from $1,600 2025-10-27
Unclassified MEDIUM 6.5
CVE-2025-62924

Missing Authorization vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting Incorrectly Configured Access Control S…

Mitigation only
Fix from $1,600 2025-10-27
Unclassified MEDIUM 5.4
CVE-2025-62925

Missing Authorization vulnerability in Conversios Conversios.io enhanced-e-commerce-for-woocommerce-store allows Exploiting Incorrectly Configured Ac…

Mitigation only
Fix from $1,600 2025-10-27
Unclassified MEDIUM 6.5
CVE-2025-62927

Missing Authorization vulnerability in Nelio Software Nelio Content nelio-content allows Exploiting Incorrectly Configured Access Control Security Le…

No fix yet
Fix from $1,600 2025-10-27
Unclassified MEDIUM 6.5
CVE-2025-62929

Missing Authorization vulnerability in PickPlugins Testimonial Slider testimonial allows Exploiting Incorrectly Configured Access Control Security Le…

Mitigation only
Fix from $1,600 2025-10-27
Unclassified MEDIUM 5.4
CVE-2025-62916

Missing Authorization vulnerability in Travon WP Flights & Hotels Booking WP Plugin adiaha-hotel allows Exploiting Incorrectly Configured Access Cont…

Mitigation only
Fix from $1,600 2025-10-27
Unclassified MEDIUM 5.4
CVE-2025-62918

Missing Authorization vulnerability in ignitionwp IgnitionDeck ignitiondeck allows Exploiting Incorrectly Configured Access Control Security Levels.T…

Mitigation only
Fix from $1,600 2025-10-27
Unclassified MEDIUM 5.4
CVE-2025-62919

Missing Authorization vulnerability in themeshopy TS Demo Importer ts-demo-importer allows Exploiting Incorrectly Configured Access Control Security …

Mitigation only
Fix from $1,600 2025-10-27
Unclassified MEDIUM 5.3
CVE-2025-62922

Missing Authorization vulnerability in Shambhu Patnaik Export Categories export-categories allows Accessing Functionality Not Properly Constrained by…

Mitigation only
Fix from $1,600 2025-10-27
Unclassified MEDIUM 5.3
CVE-2025-62892

Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Accessing Functionality Not Properly Constrai…

Mitigation only
Fix from $1,600 2025-10-27
Unclassified MEDIUM 5.3
CVE-2025-62884

Missing Authorization vulnerability in Elliot Sowersby / RelyWP Coupon Affiliates woo-coupon-usage allows Accessing Functionality Not Properly Constr…

Mitigation only
Fix from $1,600 2025-10-27
Unclassified MEDIUM 6.5
CVE-2025-62889

Missing Authorization vulnerability in KingAddons.com King Addons for Elementor king-addons allows Exploiting Incorrectly Configured Access Control S…

Mitigation only
Fix from $1,600 2025-10-27
GitLab HIGH 8.1
CVE-2025-11989

GitLab has remediated an issue in GitLab EE affecting all versions from 17.6.0 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could h…

Fix: 18.3.5 / 18.4.3+
Fix from $1,950 2025-10-27