Browse CVEs

HIGH 8.8 CVE-2025-2075 The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin for WordPress is vulnerable to Privilege Escalation in all v… Uncanny Automator 6.4+ Fix from $1,9502025-04-04 HIGH 7.5 CVE-2025-31909 Missing Authorization vulnerability in Apptivo Apptivo Business Site CRM apptivo-business-site allows Exploiting Incorrectly Configured Access Contro… Mitigation only Fix from $1,9502025-04-03 MEDIUM 6.5 CVE-2025-31858 Missing Authorization vulnerability in matthewrubin Local Magic local-magic allows Exploiting Incorrectly Configured Access Control Security Levels.T… No fix yet Fix from $1,6002025-04-03 MEDIUM 5.8 CVE-2025-31876 Missing Authorization vulnerability in gunnarpayday Payday payday allows Exploiting Incorrectly Configured Access Control Security Levels.This issue … No fix yet Fix from $1,6002025-04-03 MEDIUM 6.5 CVE-2025-31896 Missing Authorization vulnerability in istmoplugins GetBookingsWP get-bookings-wp allows Exploiting Incorrectly Configured Access Control Security Le… Mitigation only Fix from $1,6002025-04-03 MEDIUM 6.3 CVE-2025-31841 Missing Authorization vulnerability in Frank P. Walentynowicz FPW Category Thumbnails fpw-category-thumbnails allows Exploiting Incorrectly Configure… Mitigation only Fix from $1,6002025-04-03 MEDIUM 6.5 CVE-2025-31758 Missing Authorization vulnerability in BinaryCarpenter Free Woocommerce Product Table View free-product-table-for-woocommerce allows Exploiting Incor… Mitigation only Fix from $1,6002025-04-03 MEDIUM 6.5 CVE-2025-31768 Missing Authorization vulnerability in OTWthemes Widget Manager Light widget-manager-light allows Accessing Functionality Not Properly Constrained by… Mitigation only Fix from $1,6002025-04-03 MEDIUM 6.5 CVE-2025-31789 Missing Authorization vulnerability in Matat Technologies TextMe SMS textme-sms-integration allows Exploiting Incorrectly Configured Access Control S… No fix yet Fix from $1,6002025-04-03 MEDIUM 5.4 CVE-2025-31794 Missing Authorization vulnerability in Web Ready Now WR Price List Manager For Woocommerce wr-price-list-for-woocommerce allows Exploiting Incorrectl… Mitigation only Fix from $1,6002025-04-03 MEDIUM 6.5 CVE-2025-31795 Missing Authorization vulnerability in Plugin Devs Shopify to WooCommerce Migration migrate-shopify-to-woocommerce allows Exploiting Incorrectly Conf… Mitigation only Fix from $1,6002025-04-03 MEDIUM 6.5 CVE-2025-31729 Missing Authorization vulnerability in jeffikus WooTumblog woo-tumblog allows Exploiting Incorrectly Configured Access Control Security Levels.This i… Mitigation only Fix from $1,6002025-04-03 MEDIUM 6.5 CVE-2025-31736 Missing Authorization vulnerability in richtexteditor Rich Text Editor richtexteditor allows Exploiting Incorrectly Configured Access Control Securit… Mitigation only Fix from $1,6002025-04-03 MEDIUM 6.4 CVE-2025-31739 Missing Authorization vulnerability in Manuel Schmalstieg Minimalistic Event Manager minimalistic-event-manager allows Exploiting Incorrectly Configu… Mitigation only Fix from $1,6002025-04-03 MEDIUM 6.4 CVE-2025-31746 Missing Authorization vulnerability in Think201 Clients clients allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… Mitigation only Fix from $1,6002025-04-03 MEDIUM 6.5 CVE-2025-31581 Missing Authorization vulnerability in Sandeep Kumar WP Video Playlist wp-video-playlist allows Exploiting Incorrectly Configured Access Control Secu… Mitigation only Fix from $1,6002025-04-03 MEDIUM 6.5 CVE-2025-31541 Missing Authorization vulnerability in TuriTop TuriTop Booking System turitop-booking-system allows Exploiting Incorrectly Configured Access Control … Mitigation only Fix from $1,6002025-04-03 MEDIUM 6.5 CVE-2025-30915 Missing Authorization vulnerability in enituretechnology Small Package Quotes – Worldwide Express Edition small-package-quotes-wwe-edition allows Exp… Mitigation only Fix from $1,6002025-04-03 MEDIUM 6.5 CVE-2025-30916 Missing Authorization vulnerability in enituretechnology Residential Address Detection residential-address-detection allows Exploiting Incorrectly Co… Mitigation only Fix from $1,6002025-04-03 HIGH 8.8 CVE-2025-3063 The Shopper Approved Reviews plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a m… Mitigation only Fix from $1,9502025-04-02 MEDIUM 6.5 CVE-2024-13637 The Demo Awesome plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the install_plugin func… Mitigation only Fix from $1,6002025-04-02 MEDIUM 6.5 CVE-2025-2779 The Insert Headers and Footers Code – HT Script plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability c… Mitigation only Fix from $1,6002025-04-02 HIGH 7.5 CVE-2025-31580 Missing Authorization vulnerability in Anzar Ahmed Ni WooCommerce Product Enquiry ni-woocommerce-product-enquiry allows Accessing Functionality Not P… Mitigation only Fix from $1,9502025-04-01 MEDIUM 5.3 CVE-2025-31628 Missing Authorization vulnerability in SlicedInvoices Sliced Invoices sliced-invoices allows Exploiting Incorrectly Configured Access Control Securit… Mitigation only Fix from $1,6002025-04-01 HIGH 8.8 CVE-2025-30825 Missing Authorization vulnerability in WPClever WPC Smart Linked Products - Upsells & Cross-sells for WooCommerce wpc-smart-linked-products allows Pr… Mitigation only Fix from $1,9502025-04-01 MEDIUM 5.4 CVE-2025-30853 Missing Authorization vulnerability in ShortPixel ShortPixel Adaptive Images shortpixel-adaptive-images allows Exploiting Incorrectly Configured Acce… Mitigation only Fix from $1,6002025-04-01 MEDIUM 5.4 CVE-2025-31878 Missing Authorization vulnerability in Dmitry V. (CEO of "UKR Solution") UPC/EAN/GTIN Code Generator upc-ean-barcode-generator allows Exploiting Inco… No fix yet Fix from $1,6002025-04-01 MEDIUM 5.4 CVE-2025-31879 Missing Authorization vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Generator for WooCommerce embedding-barcodes-into-product-pages-and-… Mitigation only Fix from $1,6002025-04-01 MEDIUM 5.4 CVE-2025-31881 Missing Authorization vulnerability in Stylemix Pearl pearl-header-builder allows Exploiting Incorrectly Configured Access Control Security Levels.Th… Mitigation only Fix from $1,6002025-04-01 MEDIUM 5.4 CVE-2025-31870 Missing Authorization vulnerability in EXEIdeas International WP AutoKeyword wp-autokeyword allows Exploiting Incorrectly Configured Access Control S… Mitigation only Fix from $1,6002025-04-01