Browse CVEs

MEDIUM 5.4 CVE-2025-53318 Missing Authorization vulnerability in WPManiax WP DB Booster wp-db-booster allows Exploiting Incorrectly Configured Access Control Security Levels.T… No fix yet Fix from $1,6002025-06-27 MEDIUM 5.3 CVE-2025-53304 Missing Authorization vulnerability in Rohil Contact Form – 7 : Hide Success Message contact-form-7-hide-success-message allows Accessing Functionali… Mitigation only Fix from $1,6002025-06-27 MEDIUM 5.3 CVE-2025-53295 Missing Authorization vulnerability in iCount iCount Payment Gateway icount allows Accessing Functionality Not Properly Constrained by ACLs.This issu… Mitigation only Fix from $1,6002025-06-27 MEDIUM 6.5 CVE-2025-53284 Missing Authorization vulnerability in pankaj.sakaria CMS Blocks cms-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.T… No fix yet Fix from $1,6002025-06-27 MEDIUM 5.3 CVE-2025-53255 Missing Authorization vulnerability in Nabil Lemsieh HurryTimer hurrytimer allows Exploiting Incorrectly Configured Access Control Security Levels.Th… Mitigation only Fix from $1,6002025-06-27 HIGH 8.8 CVE-2025-52824 Missing Authorization vulnerability in MDJM Mobile DJ Manager mobile-dj-manager allows Exploiting Incorrectly Configured Access Control Security Leve… Mitigation only Fix from $1,9502025-06-27 HIGH 8.2 CVE-2025-52817 Missing Authorization vulnerability in ZealousWeb Abandoned Contact Form 7 abandoned-contact-form-7 allows Exploiting Incorrectly Configured Access C… Mitigation only Fix from $1,9502025-06-27 HIGH 8.2 CVE-2025-52818 Missing Authorization vulnerability in Dejan Jasnic Trusty Whistleblowing trusty-whistleblowing-solution allows Exploiting Incorrectly Configured Acc… Mitigation only Fix from $1,9502025-06-27 MEDIUM 5.3 CVE-2025-5813 The Amazon Products to WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the w… Amazon Products To Woocommerce after 1.2.7 Fix from $1,6002025-06-26 CRITICAL 9.9 CVE-2025-5121EPSS 10% An issue has been discovered in GitLab CE/EE affecting all versions from 17.11 before 17.11.4 and 18.0 before 18.0.2. A missing authorization check m… GitLab 17.11.4 / 18.0.2+ Fix from $2,3002025-06-20 HIGH 7.5 CVE-2025-52802 Missing Authorization vulnerability in enguerranws Import YouTube videos as WP Posts import-youtube-videos-as-wp-post allows Exploiting Incorrectly C… Mitigation only Fix from $1,9502025-06-20 MEDIUM 6.5 CVE-2025-50034 Missing Authorization vulnerability in Mahmudul Hasan Arif Enhanced Blocks – Page Builder Blocks for Gutenberg enhanced-blocks allows Exploiting Inco… Mitigation only Fix from $1,6002025-06-20 MEDIUM 5.4 CVE-2025-49998 Missing Authorization vulnerability in Wetail WooCommerce Fortnox Integration woocommerce-fortnox-integration allows Exploiting Incorrectly Configure… Mitigation only Fix from $1,6002025-06-20 MEDIUM 5.4 CVE-2025-50008 Missing Authorization vulnerability in cscode WooCommerce Manager – Customize and Control Cart page, Add to Cart button, Checkout fields easily innov… Mitigation only Fix from $1,6002025-06-20 MEDIUM 5.4 CVE-2025-50009 Missing Authorization vulnerability in Climax Themes Kata Plus kata-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This… Mitigation only Fix from $1,6002025-06-20 MEDIUM 5.4 CVE-2025-50010 Missing Authorization vulnerability in Zapier Zapier for WordPress zapier allows Exploiting Incorrectly Configured Access Control Security Levels.Thi… Mitigation only Fix from $1,6002025-06-20 MEDIUM 5.3 CVE-2025-49989 Missing Authorization vulnerability in App Cheap App Builder app-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This… Mitigation only Fix from $1,6002025-06-20 MEDIUM 5.3 CVE-2025-49990 Missing Authorization vulnerability in contentstudio Contentstudio contentstudio allows Accessing Functionality Not Properly Constrained by ACLs.This… Mitigation only Fix from $1,6002025-06-20 MEDIUM 5.3 CVE-2025-49991 Missing Authorization vulnerability in tggfref WP-Recall allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WP-Recal… Mitigation only Fix from $1,6002025-06-20 MEDIUM 5.3 CVE-2025-49993 Missing Authorization vulnerability in csarturas Cookie-Script.com cookie-script-com allows Exploiting Incorrectly Configured Access Control Security… No fix yet Fix from $1,6002025-06-20 MEDIUM 5.3 CVE-2025-49996 Missing Authorization vulnerability in osama.esh WP Visitor Statistics (Real Time Traffic) wp-stats-manager allows Accessing Functionality Not Proper… Mitigation only Fix from $1,6002025-06-20 MEDIUM 5.3 CVE-2025-49997 Missing Authorization vulnerability in Syed Balkhi Giveaways and Contests by RafflePress rafflepress allows Accessing Functionality Not Properly Cons… Mitigation only Fix from $1,6002025-06-20 MEDIUM 5.3 CVE-2025-49986 Missing Authorization vulnerability in thanhtungtnt Video List Manager video-list-manager allows Accessing Functionality Not Properly Constrained by … Mitigation only Fix from $1,6002025-06-20 MEDIUM 5.3 CVE-2025-49987 Missing Authorization vulnerability in WPFactory CRM ERP Business Solution crm-erp-business-solution allows Exploiting Incorrectly Configured Access … Mitigation only Fix from $1,6002025-06-20 MEDIUM 5.3 CVE-2025-49988 Missing Authorization vulnerability in Renzo Johnson Contact Form 7 AWeber Extension integrate-contact-form-7-and-aweber allows Exploiting Incorrectl… Mitigation only Fix from $1,6002025-06-20 CRITICAL 9.8 CVE-2024-53298 Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.1, contains a missing authorization vulnerability in the NFS export. An unauthenticated attack… Powerscale Onefs after 9.10.0.1 Fix from $2,3002025-06-20 MEDIUM 5.4 CVE-2025-4571 The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized view and modification of data due to an insu… Givewp 4.3.1+ Fix from $1,6002025-06-19 CRITICAL 9.8 CVE-2025-1562 The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to unauth… Funnelkit Automations 3.6.0+ Fix from $2,3002025-06-18 MEDIUM 5.3 CVE-2025-49864 Missing Authorization vulnerability in AFS Analytics AFS Analytics addfreestats allows Accessing Functionality Not Properly Constrained by ACLs.This … Mitigation only Fix from $1,6002025-06-17 MEDIUM 5.3 CVE-2025-49872 Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects my… Mitigation only Fix from $1,6002025-06-17