Browse CVEs

HIGH 8.4 CVE-2025-2298 An improper authorization vulnerability in Dremio Software allows authenticated users to delete arbitrary files that the system has access to, includ… Mitigation only Fix from $1,9502025-04-21 MEDIUM 6.5 CVE-2025-3808 A vulnerability has been found in zhenfeng13 My-BBS 1.0 and classified as problematic. This vulnerability affects unknown code. The manipulation lead… My Bbs No fix yet Fix from $1,6002025-04-19 CRITICAL 9.8 CVE-2024-53591 An issue in the login page of Seclore v3.27.5.0 allows attackers to bypass authentication via a brute force attack. Seclore No fix yet Fix from $2,3002025-04-18 MEDIUM 5.8 CVE-2025-39580 Missing Authorization vulnerability in jidaikobo Dashi dashi allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Dashi… Mitigation only Fix from $1,6002025-04-17 HIGH 7.1 CVE-2025-39583 Missing Authorization vulnerability in Bertha AI – Andrew Palmer BERTHA AI bertha-ai-free allows Exploiting Incorrectly Configured Access Control Sec… Mitigation only Fix from $1,9502025-04-17 MEDIUM 6.5 CVE-2025-39554 Missing Authorization vulnerability in Elliot Sowersby / RelyWP AI Text to Speech ai-text-to-speech allows Exploiting Incorrectly Configured Access C… Mitigation only Fix from $1,6002025-04-17 MEDIUM 6.5 CVE-2025-39559 Missing Authorization vulnerability in Eivin Landa Bring Fraktguiden for WooCommerce bring-fraktguiden-for-woocommerce allows Exploiting Incorrectly … Mitigation only Fix from $1,6002025-04-17 HIGH 7.5 CVE-2025-39532 Missing Authorization vulnerability in spicethemes Spice Blocks spice-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.… Mitigation only Fix from $1,9502025-04-17 HIGH 8.8 CVE-2025-39533 Missing Authorization vulnerability in Starfish Reviews Starfish Review Generation & Marketing starfish-reviews allows Privilege Escalation.This issu… Mitigation only Fix from $1,9502025-04-17 MEDIUM 5.4 CVE-2025-39456 Missing Authorization vulnerability in iTRON WP Logger wp-data-logger allows Exploiting Incorrectly Configured Access Control Security Levels.This is… No fix yet Fix from $1,6002025-04-17 MEDIUM 5.3 CVE-2025-39457 Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorre… Mitigation only Fix from $1,6002025-04-17 HIGH 7.1 CVE-2025-32620 Missing Authorization vulnerability in fromdoppler Doppler Forms doppler-form allows Exploiting Incorrectly Configured Access Control Security Levels… Mitigation only Fix from $1,9502025-04-17 HIGH 8.2 CVE-2025-32593 Missing Authorization vulnerability in Bytes Technolab Add Product Frontend for WooCommerce add-product-frontend-for-woocommerce allows Exploiting In… Mitigation only Fix from $1,9502025-04-17 HIGH 7.5 CVE-2025-32544 Missing Authorization vulnerability in The Right Software WooCommerce Loyal Customers woocommerce-loyal-customer allows Accessing Functionality Not P… Mitigation only Fix from $1,9502025-04-17 MEDIUM 6.5 CVE-2025-27310 Missing Authorization vulnerability in Radius of Thought Page and Post Lister page-and-post-lister allows Exploiting Incorrectly Configured Access Co… Mitigation only Fix from $1,6002025-04-17 HIGH 7.5 CVE-2025-26968 Missing Authorization vulnerability in webbernaut Cloak Front End Email allows Exploiting Incorrectly Configured Access Control Security Levels. This… Mitigation only Fix from $1,9502025-04-17 MEDIUM 6.5 CVE-2025-24737 Missing Authorization vulnerability in Mat Bao Corporation WP Helper Premium wp-helper-lite allows Accessing Functionality Not Properly Constrained b… Mitigation only Fix from $1,6002025-04-17 MEDIUM 6.5 CVE-2025-24583 Missing Authorization vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Exploiting Incorrectly Configured Access Contr… No fix yet Fix from $1,6002025-04-17 MEDIUM 6.5 CVE-2025-23906 Missing Authorization vulnerability in wpseek WordPress Dashboard Tweeter allows Exploiting Incorrectly Configured Access Control Security Levels. Th… Mitigation only Fix from $1,6002025-04-17 MEDIUM 6.5 CVE-2025-23958 Missing Authorization vulnerability in FADI MED Editor Wysiwyg Background Color editor-wysiwyg-background-color allows Exploiting Incorrectly Configu… Mitigation only Fix from $1,6002025-04-17 CRITICAL 9.8 CVE-2025-24577 Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… Poll Maker 5.5.1+ Fix from $2,3002025-04-17 MEDIUM 6.5 CVE-2025-24581 Missing Authorization vulnerability in Themefic Instantio instantio allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… Mitigation only Fix from $1,6002025-04-17 MEDIUM 6.5 CVE-2025-23773 Missing Authorization vulnerability in mingocommerce Delete All Posts allows Exploiting Incorrectly Configured Access Control Security Levels. This … Mitigation only Fix from $1,6002025-04-17 MEDIUM 6.9 CVE-2025-31338 A missing authorization vulnerability in the retrieve teacher Information function of Wisdom Master Pro versions 5.0 through 5.2 allows remote attack… Mitigation only Fix from $1,6002025-04-17 MEDIUM 5.4 CVE-2025-39591 Missing Authorization vulnerability in WP Shuffle WP Subscription Forms wp-subscription-forms allows Exploiting Incorrectly Configured Access Control… Mitigation only Fix from $1,6002025-04-16 MEDIUM 5.4 CVE-2025-39560 Missing Authorization vulnerability in Shahjada Live Forms liveforms allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… Mitigation only Fix from $1,6002025-04-16 MEDIUM 5.4 CVE-2025-39545 Missing Authorization vulnerability in miniOrange WordPress REST API Authentication wp-rest-api-authentication allows Exploiting Incorrectly Configur… Mitigation only Fix from $1,6002025-04-16 MEDIUM 5.4 CVE-2025-39552 Missing Authorization vulnerability in Dylan James Zephyr Project Manager zephyr-project-manager allows Exploiting Incorrectly Configured Access Cont… Mitigation only Fix from $1,6002025-04-16 MEDIUM 5.3 CVE-2025-39531 Missing Authorization vulnerability in slazzercom Slazzer Background Changer slazzer-background-changer allows Accessing Functionality Not Properly C… Mitigation only Fix from $1,6002025-04-16 MEDIUM 5.4 CVE-2025-39522 Missing Authorization vulnerability in Service2Client LLC Dynamic Post dynamic-post allows Exploiting Incorrectly Configured Access Control Security … Mitigation only Fix from $1,6002025-04-16