Browse CVEs

MEDIUM 5.4 CVE-2025-66154 Missing Authorization vulnerability in merkulove Couponer for Elementor couponer-elementor allows Exploiting Incorrectly Configured Access Control Se… Mitigation only Fix from $1,6002025-12-31 HIGH 8.8 CVE-2025-62751 Missing Authorization vulnerability in extendthemes Vireo vireo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… Vireo after 1.0.24 Fix from $1,9502025-12-31 MEDIUM 5.3 CVE-2025-62755 Missing Authorization vulnerability in GS Plugins GS Portfolio for Envato gs-envato-portfolio allows Exploiting Incorrectly Configured Access Control… Mitigation only Fix from $1,6002025-12-31 MEDIUM 5.3 CVE-2025-62747 Missing Authorization vulnerability in Aum Watcharapon Featured Image Generator featured-image-generator allows Exploiting Incorrectly Configured Acc… Mitigation only Fix from $1,6002025-12-31 MEDIUM 5.3 CVE-2025-62122 Missing Authorization vulnerability in solwininfotech Trash Duplicate and 301 Redirect trash-duplicate-and-301-redirect allows Exploiting Incorrectly… Mitigation only Fix from $1,6002025-12-31 MEDIUM 5.3 CVE-2025-62129 Missing Authorization vulnerability in Magnigenie RestroPress restropress allows Exploiting Incorrectly Configured Access Control Security Levels.Thi… Mitigation only Fix from $1,6002025-12-31 MEDIUM 5.3 CVE-2025-62092 Missing Authorization vulnerability in Wiremo Wiremo woo-reviews-by-wiremo allows Exploiting Incorrectly Configured Access Control Security Levels.Th… Mitigation only Fix from $1,6002025-12-31 MEDIUM 5.3 CVE-2025-62116 Missing Authorization vulnerability in quadlayers AI Copilot ai-copilot allows Exploiting Incorrectly Configured Access Control Security Levels.This … Mitigation only Fix from $1,6002025-12-31 MEDIUM 5.3 CVE-2025-49338 Missing Authorization vulnerability in Flowbox Flowbox flowbox allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… No fix yet Fix from $1,6002025-12-31 MEDIUM 5.3 CVE-2025-62079 Missing Authorization vulnerability in Damian WP Export Categories & Taxonomies wp-export-categories-taxonomies allows Exploiting Incorrectly Configu… Mitigation only Fix from $1,6002025-12-31 HIGH 8.8 CVE-2025-15390 A security flaw has been discovered in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /admin/edit-user.php. The manipulation … Small Crm after 4.0 Fix from $1,9502025-12-31 MEDIUM 5.3 CVE-2025-63016 Missing Authorization vulnerability in quadlayers QuadLayers TikTok Feed wp-tiktok-feed allows Exploiting Incorrectly Configured Access Control Secur… Mitigation only Fix from $1,6002025-12-31 MEDIUM 5.3 CVE-2025-63022 Missing Authorization vulnerability in topdevs.net Simple Like Page simple-facebook-plugin allows Exploiting Incorrectly Configured Access Control Se… Mitigation only Fix from $1,6002025-12-31 MEDIUM 5.3 CVE-2025-63031 Missing Authorization vulnerability in WP Grids EasyTest convertpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… Mitigation only Fix from $1,6002025-12-31 MEDIUM 5.3 CVE-2025-62141 Missing Authorization vulnerability in Information Technology Wawp automation-web-platform allows Exploiting Incorrectly Configured Access Control Se… Mitigation only Fix from $1,6002025-12-31 MEDIUM 5.3 CVE-2025-62145 Missing Authorization vulnerability in NewClarity DMCA Protection Badge dmca-badge allows Exploiting Incorrectly Configured Access Control Security L… Mitigation only Fix from $1,6002025-12-31 MEDIUM 5.3 CVE-2025-62147 Missing Authorization vulnerability in nikmelnik Realbig realbig-media allows Exploiting Incorrectly Configured Access Control Security Levels.This i… Mitigation only Fix from $1,6002025-12-31 MEDIUM 5.4 CVE-2025-62888 Missing Authorization vulnerability in Marco Milesi WP Attachments wp-attachments allows Exploiting Incorrectly Configured Access Control Security Le… Mitigation only Fix from $1,6002025-12-31 MEDIUM 5.3 CVE-2025-63001 Missing Authorization vulnerability in nicdark Hotel Booking nd-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This … Mitigation only Fix from $1,6002025-12-31 MEDIUM 5.3 CVE-2025-62081 Missing Authorization vulnerability in Channelize.io Team Live Shopping & Shoppable Videos For WooCommerce live-shopping-video-streams allows Exploit… Mitigation only Fix from $1,6002025-12-31 MEDIUM 5.4 CVE-2025-62091 Missing Authorization vulnerability in Vollstart Serial Codes Generator and Validator with WooCommerce Support serial-codes-generator-and-validator a… Mitigation only Fix from $1,6002025-12-31 MEDIUM 5.4 CVE-2025-62098 Missing Authorization vulnerability in totalsoft Portfolio Gallery gallery-portfolio allows Exploiting Incorrectly Configured Access Control Security… Mitigation only Fix from $1,6002025-12-31 MEDIUM 5.4 CVE-2025-62108 Missing Authorization vulnerability in SaifuMak Add Custom Codes add-custom-codes allows Exploiting Incorrectly Configured Access Control Security Le… Mitigation only Fix from $1,6002025-12-31 MEDIUM 5.3 CVE-2025-49349 Missing Authorization vulnerability in Reuters News Agency Reuters Direct reuters-direct allows Exploiting Incorrectly Configured Access Control Secu… Mitigation only Fix from $1,6002025-12-31 MEDIUM 5.3 CVE-2025-62138 Missing Authorization vulnerability in cedcommerce WP Advanced PDF wp-advanced-pdf allows Exploiting Incorrectly Configured Access Control Security L… Mitigation only Fix from $1,6002025-12-31 MEDIUM 5.4 CVE-2025-62144 Missing Authorization vulnerability in Mohammed Kaludi Core Web Vitals & PageSpeed Booster core-web-vitals-pagespeed-booster allows Exploiting Incorr… Mitigation only Fix from $1,6002025-12-31 CRITICAL 9.8 CVE-2023-54327 Tinycontrol LAN Controller 1.58a contains an authentication bypass vulnerability that allows unauthenticated attackers to change admin passwords thro… Lan Controller Firmware after 1.58a Fix from $2,3002025-12-30 MEDIUM 5.3 CVE-2025-66080 Missing Authorization vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent gdpr-cookie-consent allows Exploiting Incorr… Mitigation only Fix from $1,6002025-12-30 MEDIUM 5.3 CVE-2025-69093 Missing Authorization vulnerability in wpdesk ShopMagic shopmagic-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Le… Mitigation only Fix from $1,6002025-12-30 MEDIUM 5.3 CVE-2025-69027 Missing Authorization vulnerability in tychesoftwares Product Delivery Date for WooCommerce – Lite product-delivery-date-for-woocommerce-lite allows … Mitigation only Fix from $1,6002025-12-30