Vulnerability index

Browse CVEs

6,923 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Missing AuthorizationCWE-862 × clear
MEDIUM 5.3 CVE-2025-39513 Missing Authorization vulnerability in ActiveDEMAND Online Agency Marketing Automation ActiveDEMAND activedemand allows Accessing Functionality Not P… Mitigation only Fix from $1,6002025-04-16 HIGH 8.3 CVE-2025-30960 Missing Authorization vulnerability in fs-code FS Poster fs-poster.This issue affects FS Poster: from n/a through <= 6.5.8. Mitigation only Fix from $1,9502025-04-16 HIGH 7.5 CVE-2025-26953 Missing Authorization vulnerability in Crocoblock JetMenu jet-menu allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects… Mitigation only Fix from $1,9502025-04-15 HIGH 7.5 CVE-2025-27008 Missing Authorization vulnerability in NotFound Unlimited Timeline unlimited-timeline allows Accessing Functionality Not Properly Constrained by ACLs… Mitigation only Fix from $1,9502025-04-15 HIGH 7.5 CVE-2025-30716 Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). Supported versions th… Common Applications after 12.2.14 Fix from $1,9502025-04-15 HIGH 7.5 CVE-2025-32929 Missing Authorization vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Generator for WooCommerce embedding-barcodes-into-product-pages-and-… Mitigation only Fix from $1,9502025-04-15 HIGH 8.8 CVE-2025-26959 Missing Authorization vulnerability in Quý Lê 91 Administrator Z administrator-z allows Privilege Escalation.This issue affects Administrator Z: from… No fix yet Fix from $1,9502025-04-15 HIGH 7.5 CVE-2025-26942 Missing Authorization vulnerability in Crocoblock JetTricks jet-tricks allows Accessing Functionality Not Properly Constrained by ACLs.This issue aff… Mitigation only Fix from $1,9502025-04-15 HIGH 7.5 CVE-2025-26944 Missing Authorization vulnerability in Crocoblock JetPopup jet-popup allows Accessing Functionality Not Properly Constrained by ACLs.This issue affec… Mitigation only Fix from $1,9502025-04-15 HIGH 7.5 CVE-2025-26958 Missing Authorization vulnerability in Crocoblock JetBlog jet-blog allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects… Mitigation only Fix from $1,9502025-04-15 HIGH 8.8 CVE-2025-26741 Missing Authorization vulnerability in AWEOS GmbH Email Notifications for Updates wp-update-mail-notification allows Privilege Escalation.This issue … Mitigation only Fix from $1,9502025-04-15 MEDIUM 6.5 CVE-2025-3561 A vulnerability was found in ghostxbh uzy-ssm-mall 1.0.0. It has been classified as problematic. Affected is an unknown function. The manipulation le… Uzy Ssm Mall No fix yet Fix from $1,6002025-04-14 HIGH 8.8 CVE-2025-32542 Missing Authorization vulnerability in EazyPlugins Eazy Plugin Manager plugins-on-steroids allows Exploiting Incorrectly Configured Access Control Se… Mitigation only Fix from $1,9502025-04-11 HIGH 7.5 CVE-2025-31041 Missing Authorization vulnerability in AnyTrack AnyTrack Affiliate Link Manager anytrack-affiliate-link-manager allows Exploiting Incorrectly Configu… Mitigation only Fix from $1,9502025-04-11 MEDIUM 6.5 CVE-2025-32242 Missing Authorization vulnerability in Hive Support Hive Support hive-support allows Accessing Functionality Not Properly Constrained by ACLs.This is… Mitigation only Fix from $1,6002025-04-10 MEDIUM 6.5 CVE-2025-32243 Missing Authorization vulnerability in Toast Plugins Internal Link Optimiser internal-link-finder allows Exploiting Incorrectly Configured Access Con… Mitigation only Fix from $1,6002025-04-10 MEDIUM 6.5 CVE-2025-32244 Missing Authorization vulnerability in QuantumCloud SEO Help seo-help allows Exploiting Incorrectly Configured Access Control Security Levels.This is… Mitigation only Fix from $1,6002025-04-10 MEDIUM 5.3 CVE-2025-32259 Missing Authorization vulnerability in Alimir WP ULike wp-ulike.This issue affects WP ULike: from n/a through <= 4.7.9.1. Mitigation only Fix from $1,6002025-04-10 MEDIUM 5.3 CVE-2025-32260 Missing Authorization vulnerability in Detheme DethemeKit For Elementor dethemekit-for-elementor.This issue affects DethemeKit For Elementor: from n/… Mitigation only Fix from $1,6002025-04-10 MEDIUM 5.4 CVE-2025-32221 Missing Authorization vulnerability in Spider Themes EazyDocs eazydocs allows Exploiting Incorrectly Configured Access Control Security Levels.This i… Mitigation only Fix from $1,6002025-04-10 MEDIUM 6.5 CVE-2025-32240 Missing Authorization vulnerability in wpvsingh Site Notify site-notify allows Exploiting Incorrectly Configured Access Control Security Levels.This … No fix yet Fix from $1,6002025-04-10 MEDIUM 6.5 CVE-2025-32210 Missing Authorization vulnerability in CreativeMindsSolutions CM Registration and Invitation Codes cm-invitation-codes allows Exploiting Incorrectly … Mitigation only Fix from $1,6002025-04-10 MEDIUM 6.5 CVE-2025-32212 Missing Authorization vulnerability in Specia Theme Specia Companion specia-companion allows Exploiting Incorrectly Configured Access Control Securit… Mitigation only Fix from $1,6002025-04-10 MEDIUM 6.5 CVE-2025-32213 Missing Authorization vulnerability in flothemesplugins Flo Forms flo-forms allows Exploiting Incorrectly Configured Access Control Security Levels.T… Mitigation only Fix from $1,6002025-04-10 MEDIUM 6.4 CVE-2025-32216 Missing Authorization vulnerability in Spider Themes Spider Elements spider-elements allows Exploiting Incorrectly Configured Access Control Security… Mitigation only Fix from $1,6002025-04-10 MEDIUM 6.5 CVE-2025-32208 Missing Authorization vulnerability in Hive Support Hive Support hive-support allows Exploiting Incorrectly Configured Access Control Security Levels… Mitigation only Fix from $1,6002025-04-10 HIGH 8.8 CVE-2025-3417 The Embedder plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capabilit… Mitigation only Fix from $1,9502025-04-10 MEDIUM 6.5 CVE-2025-2719 The Swatchly – WooCommerce Variation Swatches for Products (product attributes: Image swatch, Color swatches, Label swatches) plugin for WordPress is… Mitigation only Fix from $1,6002025-04-10 MEDIUM 5.3 CVE-2025-26888 Missing Authorization vulnerability in Amir Helzer WooCommerce Multilingual & Multicurrency woocommerce-multilingual allows Exploiting Incorrectly Co… Mitigation only Fix from $1,6002025-04-09 HIGH 8.8 CVE-2025-26901 Missing Authorization vulnerability in Brizy Brizy Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bri… Brizy after 2.6.1 Fix from $1,9502025-04-09