Browse CVEs

MEDIUM 5.7 CVE-2025-25244 SAP Business Warehouse (Process Chains) allows an attacker to manipulate the process execution due to missing authorization check. An attacker with d… Mitigation only Fix from $1,6002025-03-11 MEDIUM 6.3 CVE-2025-1325 The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to arbitrary shortcode execution due to a missing capabilit… Wp Recall 16.26.12+ Fix from $1,6002025-03-08 MEDIUM 5.4 CVE-2024-13816 The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is vulnerable to unauthorized a… Aiomatic 2.3.7+ Fix from $1,6002025-03-08 MEDIUM 6.5 CVE-2025-1504 The Post Lockdown plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 4.0.2 via the 'pl_autocomplete' AJ… Post Lockdown after 4.0.2 Fix from $1,6002025-03-08 MEDIUM 5.3 CVE-2024-12610 The School Management System for Wordpress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the '… School Management System after 93.0.0 Fix from $1,6002025-03-07 MEDIUM 5.3 CVE-2024-12611 The School Management System for Wordpress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'title' parameter in all vers… School Management System after 93.0.0 Fix from $1,6002025-03-07 CRITICAL 9.8 CVE-2024-12876 The Golo - City Travel Guide WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, an… Golo 1.6.11+ Fix from $2,3002025-03-07 HIGH 8.8 CVE-2025-1309 The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to unauthorized modification of data that … Mitigation only Fix from $1,9502025-03-07 HIGH 8.1 CVE-2024-13655 The Flex Mag - Responsive WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of se… Mitigation only Fix from $1,9502025-03-07 MEDIUM 6.5 CVE-2025-2042 A vulnerability has been found in huang-yk student-manage 1.0 and classified as problematic. This vulnerability affects unknown code. The manipulatio… Student Manage Mitigation only Fix from $1,6002025-03-06 MEDIUM 5.3 CVE-2024-13423 The Sparkling theme for WordPress is vulnerable to unauthorized plugin activation/deactivation due to a missing capability check on the 'sparkling_ac… Mitigation only Fix from $1,6002025-03-05 MEDIUM 6.5 CVE-2025-0954 The WP Online Contract plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the json_import() and json_expo… Mitigation only Fix from $1,6002025-03-05 MEDIUM 6.5 CVE-2024-13780 The Hero Mega Menu - Responsive WordPress Menu Plugin plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path val… Mitigation only Fix from $1,6002025-03-05 HIGH 8.8 CVE-2024-13232 The WordPress Awesome Import & Export Plugin - Import & Export WordPress Data plugin for WordPress is vulnerable arbitrary SQL Execution and privileg… Mitigation only Fix from $1,9502025-03-05 MEDIUM 5.3 CVE-2024-8682 The JNews - WordPress Newspaper Magazine Blog AMP Theme theme for WordPress is vulnerable to unauthorized user registration in all versions up to, an… Mitigation only Fix from $1,6002025-03-05 CRITICAL 9.8 CVE-2025-27666 Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient Authorization Checks OVE-202305… Vasion Print 20.0.1923 / 22.0.843+ Fix from $2,3002025-03-05 CRITICAL 9.8 CVE-2025-1307 The Newscrunch theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check in the newscrunch_install_and_activate_p… Newscrunch 1.8.4.1+ Fix from $2,3002025-03-04 HIGH 8.8 CVE-2025-1639 The Animation Addons for Elementor Pro plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability c… Arolax 1.7+ Fix from $1,9502025-03-04 CRITICAL 9.8 CVE-2025-27270 Missing Authorization vulnerability in enituretechnology Residential Address Detection residential-address-detection allows Privilege Escalation.This… Mitigation only Fix from $2,3002025-03-03 MEDIUM 6.5 CVE-2025-23763 Missing Authorization vulnerability in Alex Volkov WAH Forms allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affe… Mitigation only Fix from $1,6002025-03-03 MEDIUM 6.5 CVE-2025-23613 Missing Authorization vulnerability in mediabeta WP Journal wpjournal allows Exploiting Incorrectly Configured Access Control Security Levels.This is… Mitigation only Fix from $1,6002025-03-03 MEDIUM 6.5 CVE-2025-23615 Missing Authorization vulnerability in gtekelis Interactive Page Hierarchy interactive-page-hierarchy allows Exploiting Incorrectly Configured Access… Mitigation only Fix from $1,6002025-03-03 MEDIUM 6.5 CVE-2025-23515 Missing Authorization vulnerability in tsecher ts-tree ts-tree allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… No fix yet Fix from $1,6002025-03-03 MEDIUM 6.3 CVE-2025-23440 Missing Authorization vulnerability in radicaldesigns radSLIDE radslide allows Exploiting Incorrectly Configured Access Control Security Levels.This … Mitigation only Fix from $1,6002025-03-03 HIGH 8.8 CVE-2025-24654 Missing Authorization vulnerability in SEO Squirrly SEO Plugin by Squirrly SEO squirrly-seo.This issue affects SEO Plugin by Squirrly SEO: from n/a t… Seo Plugin By Squirrly Seo 12.4.08+ Fix from $1,9502025-03-03 CRITICAL 9.1 CVE-2025-27583 Incorrect access control in the component /rest/staffResource/findAllUsersAcrossOrg of Serosoft Solutions Pvt Ltd Academia Student Information System… Academia Student Information System Mitigation only Fix from $2,3002025-03-03 MEDIUM 6.5 CVE-2025-25953 Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 was discovered to contain an Azure JWT access token exposure. Th… Academia Student Information System Mitigation only Fix from $1,6002025-03-03 MEDIUM 6.5 CVE-2025-1813 A vulnerability classified as problematic was found in zj1983 zz up to 2024-08. Affected by this vulnerability is an unknown functionality. The manip… Zz after 2024-8 Fix from $1,6002025-03-02 MEDIUM 5.3 CVE-2025-1404 The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability … Mitigation only Fix from $1,6002025-03-01 HIGH 8.8 CVE-2024-12544 The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity plugin for WordPress is vulnerable to ar… Mitigation only Fix from $1,9502025-03-01