Vulnerability index

Browse CVEs

6,923 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Missing AuthorizationCWE-862 × clear
Unclassified CRITICAL 9.8
CVE-2025-9054

The MultiLoca - WooCommerce Multi Locations Inventory Management plugin for WordPress is vulnerable to unauthorized modification of data that can lea…

Mitigation only
Fix from $2,300 2025-09-24
Unclassified MEDIUM 6.8
CVE-2025-55038

An authorization bypass vulnerability has been discovered in the Click Plus C2-03CPU2 device firmware version 3.60. Through the KOPR protocol utilize…

Mitigation only
Fix from $1,600 2025-09-23
Flagforge HIGH 7.6
CVE-2025-59826

Flag Forge is a Capture The Flag (CTF) platform. In version 2.1.0, non-admin users can create arbitrary challenges, potentially introducing malicious…

Mitigation only
Fix from $1,950 2025-09-23
Unclassified HIGH 8.2
CVE-2025-10184

The vulnerability allows any application installed on the device to read SMS/MMS data and metadata from the system-provided Telephony provider withou…

Mitigation only
Fix from $1,950 2025-09-23
Unclassified MEDIUM 6.5
CVE-2025-59581

Missing Authorization vulnerability in VW THEMES Ibtana ibtana-visual-editor allows Exploiting Incorrectly Configured Access Control Security Levels.…

Mitigation only
Fix from $1,600 2025-09-22
Unclassified MEDIUM 6.5
CVE-2025-59576

Missing Authorization vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Exploiting Incorrectly Configured A…

Mitigation only
Fix from $1,600 2025-09-22
Unclassified MEDIUM 5.5
CVE-2025-59567

Missing Authorization vulnerability in Elliot Sowersby / RelyWP Coupon Affiliates woo-coupon-usage allows Exploiting Incorrectly Configured Access Co…

Mitigation only
Fix from $1,600 2025-09-22
Unclassified MEDIUM 5.0
CVE-2025-58968

Missing Authorization vulnerability in Christiaan Pieterse MaxiBlocks maxi-blocks allows Exploiting Incorrectly Configured Access Control Security Le…

Mitigation only
Fix from $1,600 2025-09-22
Unclassified MEDIUM 5.3
CVE-2025-58969

Missing Authorization vulnerability in Greg Winiarski Custom Login URL custom-login-url allows Exploiting Incorrectly Configured Access Control Secur…

Mitigation only
Fix from $1,600 2025-09-22
Unclassified MEDIUM 5.3
CVE-2025-58685

Missing Authorization vulnerability in cecabank Cecabank WooCommerce Plugin cecabank-woocommerce allows Exploiting Incorrectly Configured Access Cont…

Mitigation only
Fix from $1,600 2025-09-22
Unclassified MEDIUM 6.5
CVE-2025-58678

Missing Authorization vulnerability in PickPlugins Accordion accordions allows Exploiting Incorrectly Configured Access Control Security Levels.This …

Mitigation only
Fix from $1,600 2025-09-22
Unclassified MEDIUM 5.3
CVE-2025-58679

Missing Authorization vulnerability in AppMySite AppMySite appmysite allows Exploiting Incorrectly Configured Access Control Security Levels.This iss…

Mitigation only
Fix from $1,600 2025-09-22
Unclassified MEDIUM 6.5
CVE-2025-58680

Missing Authorization vulnerability in gutentor Gutentor gutentor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue …

Mitigation only
Fix from $1,600 2025-09-22
Unclassified MEDIUM 5.3
CVE-2025-58681

Missing Authorization vulnerability in Jürgen Müller Easy Quotes easy-quotes allows Exploiting Incorrectly Configured Access Control Security Levels.…

Mitigation only
Fix from $1,600 2025-09-22
Unclassified MEDIUM 5.4
CVE-2025-58672

Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured Access Control Security Leve…

Mitigation only
Fix from $1,600 2025-09-22
Unclassified MEDIUM 5.4
CVE-2025-58667

Missing Authorization vulnerability in CridioStudio ListingPro Reviews listingpro-reviews allows Exploiting Incorrectly Configured Access Control Sec…

Mitigation only
Fix from $1,600 2025-09-22
Wordpress Learning Management System CRITICAL 9.8
CVE-2025-58668

Missing Authorization vulnerability in VibeThemes WPLMS wplms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff…

Fix: 4.971+
Fix from $2,300 2025-09-22
Unclassified MEDIUM 5.4
CVE-2025-58660

Missing Authorization vulnerability in brandexponents Oshine Core oshine-core allows Exploiting Incorrectly Configured Access Control Security Levels…

Mitigation only
Fix from $1,600 2025-09-22
Unclassified MEDIUM 5.4
CVE-2025-58650

Missing Authorization vulnerability in Syed Balkhi All In One SEO Pack all-in-one-seo-pack allows Exploiting Incorrectly Configured Access Control Se…

Mitigation only
Fix from $1,600 2025-09-22
Unclassified MEDIUM 5.3
CVE-2025-58247

Missing Authorization vulnerability in templateinvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows Exploiting Incorrectly Configured Acce…

Mitigation only
Fix from $1,600 2025-09-22
Unclassified MEDIUM 5.3
CVE-2025-58222

Missing Authorization vulnerability in Maidul Team Manager wp-team-manager allows Exploiting Incorrectly Configured Access Control Security Levels.Th…

Mitigation only
Fix from $1,600 2025-09-22
Unclassified MEDIUM 5.3
CVE-2025-58029

Missing Authorization vulnerability in Sumit Singh Classic Widgets with Block-based Widgets classic-widgets-with-block-based-widgets allows Accessing…

Mitigation only
Fix from $1,600 2025-09-22
Unclassified MEDIUM 5.3
CVE-2025-58000

Missing Authorization vulnerability in memberful Memberful - Membership Plugin memberful-wp allows Accessing Functionality Not Properly Constrained b…

Mitigation only
Fix from $1,600 2025-09-22
Unclassified MEDIUM 5.3
CVE-2025-58003

Missing Authorization vulnerability in javothemes Javo Core javo-core allows Exploiting Incorrectly Configured Access Control Security Levels.This is…

Mitigation only
Fix from $1,600 2025-09-22
Unclassified MEDIUM 5.3
CVE-2025-58004

Missing Authorization vulnerability in SmartDataSoft DriCub dricub-driving-school allows Exploiting Incorrectly Configured Access Control Security Le…

Mitigation only
Fix from $1,600 2025-09-22
Unclassified MEDIUM 5.3
CVE-2025-57987

Missing Authorization vulnerability in ThimPress WP Events Manager wp-events-manager allows Exploiting Incorrectly Configured Access Control Security…

No fix yet
Fix from $1,600 2025-09-22
Unclassified MEDIUM 5.4
CVE-2025-57990

Missing Authorization vulnerability in solwininfotech Blog Designer blog-designer allows Exploiting Incorrectly Configured Access Control Security Le…

Mitigation only
Fix from $1,600 2025-09-22
Unclassified MEDIUM 5.4
CVE-2025-57991

Missing Authorization vulnerability in Clariti Clariti clariti allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff…

Mitigation only
Fix from $1,600 2025-09-22
Unclassified MEDIUM 5.3
CVE-2025-57976

Missing Authorization vulnerability in CardCom CardCom Payment Gateway woo-cardcom-payment-gateway allows Exploiting Incorrectly Configured Access Co…

Mitigation only
Fix from $1,600 2025-09-22
Unclassified MEDIUM 5.3
CVE-2025-57971

Missing Authorization vulnerability in SALESmanago SALESmanago & Leadoo salesmanago allows Exploiting Incorrectly Configured Access Control Security …

Mitigation only
Fix from $1,600 2025-09-22