Browse CVEs

MEDIUM 6.5 CVE-2025-67624 Missing Authorization vulnerability in Arya Dhiratara Optimize More! – Images optimize-more-images allows Exploiting Incorrectly Configured Access Co… Mitigation only Fix from $1,6002026-02-20 HIGH 7.6 CVE-2025-53217 Missing Authorization vulnerability in staviravn AIO WP Builder all-in-one-wp-builder allows Exploiting Incorrectly Configured Access Control Securit… Mitigation only Fix from $1,9502026-02-20 MEDIUM 5.3 CVE-2024-43228 Missing Authorization vulnerability in SecuPress SecuPress Free secupress.This issue affects SecuPress Free: from n/a through <= 2.2.5.3. Mitigation only Fix from $1,6002026-02-20 MEDIUM 5.3 CVE-2024-34438 Missing Authorization vulnerability in Anssi Laitila Shared Files shared-files.This issue affects Shared Files: from n/a through <= 1.7.19. Mitigation only Fix from $1,6002026-02-20 MEDIUM 6.3 CVE-2026-2819 A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.5.3. This vulnerability affects the function SaServletFilter of the file /workflow/i… Mitigation only Fix from $1,6002026-02-20 MEDIUM 5.3 CVE-2026-26977 Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In versions 2.44.0 and below, unauthorized use… Learning 2.45.0+ Fix from $1,6002026-02-20 CRITICAL 10.0 CVE-2025-30416 Sensitive data disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect 16 (Linux, Window… Cyber Protect Mitigation only Fix from $2,3002026-02-20 MEDIUM 5.3 CVE-2026-27368 Missing Authorization vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon allows Exploiting Inc… Mitigation only Fix from $1,6002026-02-19 MEDIUM 5.4 CVE-2026-27387 Missing Authorization vulnerability in Designinvento DirectoryPress directorypress allows Exploiting Incorrectly Configured Access Control Security L… Mitigation only Fix from $1,6002026-02-19 MEDIUM 5.3 CVE-2026-27328 Missing Authorization vulnerability in DevsBlink EduBlink edublink allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… Mitigation only Fix from $1,6002026-02-19 MEDIUM 5.3 CVE-2025-15563 Any unauthenticated user can reset the WorkTime on-prem database configuration by sending a specific HTTP request to the WorkTime server. No authoriz… Worktime after 11.8.8 Fix from $1,6002026-02-19 MEDIUM 6.5 CVE-2026-27092 Missing Authorization vulnerability in Greg Winiarski WPAdverts wpadverts allows Exploiting Incorrectly Configured Access Control Security Levels.Thi… Mitigation only Fix from $1,6002026-02-19 MEDIUM 5.3 CVE-2026-27042 Missing Authorization vulnerability in WPDeveloper NotificationX notificationx allows Exploiting Incorrectly Configured Access Control Security Level… Mitigation only Fix from $1,6002026-02-19 MEDIUM 5.4 CVE-2026-25473 Missing Authorization vulnerability in AA-Team WZone woozone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… Mitigation only Fix from $1,6002026-02-19 HIGH 8.8 CVE-2026-26358 Dell Unisphere for PowerMax, version(s) 10.2, contain(s) a Missing Authorization vulnerability. A low privileged attacker with remote access could po… Unisphere For Powermax 10.3.0.1+ Fix from $1,9502026-02-19 MEDIUM 5.3 CVE-2026-25441 Missing Authorization vulnerability in varunvairavanlc LeadConnector leadconnector allows Exploiting Incorrectly Configured Access Control Security L… Mitigation only Fix from $1,6002026-02-19 MEDIUM 5.3 CVE-2026-25415 Missing Authorization vulnerability in iqonicdesign WPBookit Pro wpbookit-pro allows Exploiting Incorrectly Configured Access Control Security Levels… Mitigation only Fix from $1,6002026-02-19 MEDIUM 5.3 CVE-2026-25404 Missing Authorization vulnerability in Automattic WP Job Manager wp-job-manager allows Exploiting Incorrectly Configured Access Control Security Leve… Mitigation only Fix from $1,6002026-02-19 MEDIUM 5.3 CVE-2026-25408 Missing Authorization vulnerability in PluginRx Broken Link Notifier broken-link-notifier allows Exploiting Incorrectly Configured Access Control Sec… Mitigation only Fix from $1,6002026-02-19 MEDIUM 5.4 CVE-2026-25391 Missing Authorization vulnerability in WP Grids WP Wand ai-content-generation allows Exploiting Incorrectly Configured Access Control Security Levels… Mitigation only Fix from $1,6002026-02-19 MEDIUM 5.3 CVE-2026-25384 Missing Authorization vulnerability in WP Lab WP-Lister Lite for eBay wp-lister-for-ebay allows Exploiting Incorrectly Configured Access Control Secu… Mitigation only Fix from $1,6002026-02-19 MEDIUM 5.3 CVE-2026-25386 Missing Authorization vulnerability in Elementor Ally pojo-accessibility allows Exploiting Incorrectly Configured Access Control Security Levels.This… Mitigation only Fix from $1,6002026-02-19 MEDIUM 5.4 CVE-2026-25388 Missing Authorization vulnerability in scripteo Ads Pro ap-plugin-scripteo allows Exploiting Incorrectly Configured Access Control Security Levels.Th… No fix yet Fix from $1,6002026-02-19 MEDIUM 5.3 CVE-2026-25364 Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access C… Mitigation only Fix from $1,6002026-02-19 MEDIUM 5.3 CVE-2026-25367 Missing Authorization vulnerability in NooTheme CitiLights noo-citilights allows Exploiting Incorrectly Configured Access Control Security Levels.Thi… Mitigation only Fix from $1,6002026-02-19 MEDIUM 6.5 CVE-2026-25368 Missing Authorization vulnerability in codepeople Calculated Fields Form calculated-fields-form allows Exploiting Incorrectly Configured Access Contr… Mitigation only Fix from $1,6002026-02-19 MEDIUM 5.3 CVE-2026-25370 Missing Authorization vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Exploiting Incorrectly Configured Access Control Securit… Mitigation only Fix from $1,6002026-02-19 MEDIUM 6.5 CVE-2026-25372 Missing Authorization vulnerability in Kodezen LLC Academy LMS academy allows Exploiting Incorrectly Configured Access Control Security Levels.This i… Mitigation only Fix from $1,6002026-02-19 MEDIUM 5.3 CVE-2026-25374 Missing Authorization vulnerability in raratheme Spa and Salon spa-and-salon allows Exploiting Incorrectly Configured Access Control Security Levels.… No fix yet Fix from $1,6002026-02-19 MEDIUM 5.3 CVE-2026-25333 Missing Authorization vulnerability in peregrinethemes Shopwell shopwell allows Exploiting Incorrectly Configured Access Control Security Levels.This… Mitigation only Fix from $1,6002026-02-19