Browse CVEs

MEDIUM 5.3 CVE-2025-68595 Missing Authorization vulnerability in Trustindex Widgets for Social Photo Feed social-photo-feed-widget allows Exploiting Incorrectly Configured Acc… Mitigation only Fix from $1,6002025-12-24 MEDIUM 5.3 CVE-2025-68579 Missing Authorization vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Exploiting Incorrectly Configured Access Control Secu… Mitigation only Fix from $1,6002025-12-24 MEDIUM 5.4 CVE-2025-68581 Missing Authorization vulnerability in YITHEMES YITH Slider for page builders yith-slider-for-page-builders allows Exploiting Incorrectly Configured … Mitigation only Fix from $1,6002025-12-24 MEDIUM 5.3 CVE-2025-68582 Missing Authorization vulnerability in Funnelforms Funnelforms Free funnelforms-free allows Exploiting Incorrectly Configured Access Control Security… Mitigation only Fix from $1,6002025-12-24 MEDIUM 5.3 CVE-2025-68586 Missing Authorization vulnerability in Gora Tech Cooked cooked allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… Mitigation only Fix from $1,6002025-12-24 MEDIUM 5.3 CVE-2025-68571 Missing Authorization vulnerability in SALESmanago SALESmanago & Leadoo salesmanago allows Exploiting Incorrectly Configured Access Control Security … Mitigation only Fix from $1,6002025-12-24 MEDIUM 5.3 CVE-2025-68572 Missing Authorization vulnerability in Spider Themes BBP Core bbp-core allows Exploiting Incorrectly Configured Access Control Security Levels.This i… Mitigation only Fix from $1,6002025-12-24 MEDIUM 5.3 CVE-2025-68575 Missing Authorization vulnerability in Wappointment team Wappointment wappointment allows Exploiting Incorrectly Configured Access Control Security L… Mitigation only Fix from $1,6002025-12-24 MEDIUM 5.3 CVE-2025-68578 Missing Authorization vulnerability in Addonify Addonify addonify-quick-view allows Exploiting Incorrectly Configured Access Control Security Levels.… Mitigation only Fix from $1,6002025-12-24 MEDIUM 5.3 CVE-2025-68565 Missing Authorization vulnerability in JayBee Twitch Player ttv-easy-embed-player allows Exploiting Incorrectly Configured Access Control Security Le… No fix yet Fix from $1,6002025-12-24 MEDIUM 5.3 CVE-2025-68568 Missing Authorization vulnerability in Claspo Popup Builders Claspo – Popups, Spin the Wheel & Email Capture claspo allows Exploiting Incorrectly Con… Mitigation only Fix from $1,6002025-12-24 MEDIUM 6.5 CVE-2025-68569 Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows Exploiting Incorrectly Configured Acce… Mitigation only Fix from $1,6002025-12-24 MEDIUM 5.4 CVE-2025-68517 Missing Authorization vulnerability in Essekia Tablesome tablesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… Mitigation only Fix from $1,6002025-12-24 MEDIUM 5.3 CVE-2025-68521 Missing Authorization vulnerability in wpstream WpStream wpstream allows Exploiting Incorrectly Configured Access Control Security Levels.This issue … No fix yet Fix from $1,6002025-12-24 MEDIUM 5.3 CVE-2025-68505 Missing Authorization vulnerability in icc0rz H5P h5p allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects H5P:… Mitigation only Fix from $1,6002025-12-24 MEDIUM 5.3 CVE-2025-68508 Missing Authorization vulnerability in Brave Brave brave-popup-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This i… No fix yet Fix from $1,6002025-12-24 MEDIUM 6.5 CVE-2025-68511 Missing Authorization vulnerability in Jegstudio Gutenverse Form gutenverse-form allows Exploiting Incorrectly Configured Access Control Security Lev… Mitigation only Fix from $1,6002025-12-24 MEDIUM 6.5 CVE-2023-40679 Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor allows Exploiting Incorrectly Configured Access Control Security Level… Mitigation only Fix from $1,6002025-12-24 MEDIUM 5.3 CVE-2025-68556 Missing Authorization vulnerability in VillaTheme HAPPY happy-helpdesk-support-ticket-system allows Exploiting Incorrectly Configured Access Control … Mitigation only Fix from $1,6002025-12-23 HIGH 7.5 CVE-2024-24844 Missing Authorization vulnerability in IdeaBox Creations PowerPack Pro for Elementor allows Exploiting Incorrectly Configured Access Control Security… Mitigation only Fix from $1,9502025-12-23 MEDIUM 5.3 CVE-2025-14155 The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to unauthorized access of data due to a … Premium Addons For Elementor 4.11.54+ Fix from $1,6002025-12-23 HIGH 8.1 CVE-2025-12934 The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capab… Mitigation only Fix from $1,9502025-12-23 HIGH 7.5 CVE-2025-66735 youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The getRoleForm function in SysRoleController.java does not perform permission checks,… Youlai Boot Patch available Fix from $1,9502025-12-22 HIGH 7.1 CVE-2025-66736 youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The importUsers function in SysUserController.java does not perform a permission check… Youlai Boot Patch available Fix from $1,9502025-12-22 MEDIUM 5.3 CVE-2025-14043 The Tainacan plugin for WordPress is vulnerable to unauthorized metadata section creation due to missing authorization checks in all versions up to, … Mitigation only Fix from $1,6002025-12-21 MEDIUM 5.3 CVE-2025-14080 The Frontend Post Submission Manager Lite plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.2.5. Th… Mitigation only Fix from $1,6002025-12-21 HIGH 7.5 CVE-2025-12980 The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to unauthorized access of data due to a … Mitigation only Fix from $1,9502025-12-21 MEDIUM 5.4 CVE-2023-25445 Missing Authorization vulnerability in HappyFiles HappyFiles Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… No fix yet Fix from $1,6002025-12-21 HIGH 7.7 CVE-2023-25446 Missing Authorization vulnerability in HappyFiles HappyFiles Pro happyfiles-pro allows Exploiting Incorrectly Configured Access Control Security Leve… Mitigation only Fix from $1,9502025-12-21 HIGH 7.6 CVE-2025-7782 The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to unauthorized modification of data due to a missing capability chec… Mitigation only Fix from $1,9502025-12-20