Browse CVEs

MEDIUM 5.4 CVE-2025-66163 Missing Authorization vulnerability in merkulove Masker for Elementor masker-elementor allows Exploiting Incorrectly Configured Access Control Securi… No fix yet Fix from $1,6002025-12-16 MEDIUM 5.4 CVE-2025-66164 Missing Authorization vulnerability in merkulove Laser laser allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… No fix yet Fix from $1,6002025-12-16 MEDIUM 5.4 CVE-2025-66165 Missing Authorization vulnerability in merkulove Lottier for WPBakery lottier-wpbakery allows Exploiting Incorrectly Configured Access Control Securi… Mitigation only Fix from $1,6002025-12-16 MEDIUM 5.4 CVE-2025-66166 Missing Authorization vulnerability in merkulove Lottier for Elementor lottier-elementor allows Exploiting Incorrectly Configured Access Control Secu… Mitigation only Fix from $1,6002025-12-16 MEDIUM 5.3 CVE-2025-66127 Missing Authorization vulnerability in g5theme Essential Real Estate essential-real-estate allows Exploiting Incorrectly Configured Access Control Se… Mitigation only Fix from $1,6002025-12-16 MEDIUM 5.3 CVE-2025-66128 Missing Authorization vulnerability in Brevo Sendinblue for WooCommerce woocommerce-sendinblue-newsletter-subscription allows Exploiting Incorrectly … Mitigation only Fix from $1,6002025-12-16 MEDIUM 5.3 CVE-2025-66129 Missing Authorization vulnerability in wppochipp Pochipp pochipp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… Mitigation only Fix from $1,6002025-12-16 MEDIUM 5.3 CVE-2025-66130 Missing Authorization vulnerability in etruel WP Views Counter wpecounter allows Exploiting Incorrectly Configured Access Control Security Levels.Thi… Mitigation only Fix from $1,6002025-12-16 MEDIUM 5.3 CVE-2025-66131 Missing Authorization vulnerability in yaadsarig Yaad Sarig Payment Gateway For WC yaad-sarig-payment-gateway-for-wc allows Exploiting Incorrectly Co… Mitigation only Fix from $1,6002025-12-16 MEDIUM 5.3 CVE-2025-66133 Missing Authorization vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent gdpr-cookie-consent allows Exploiting Incorr… Mitigation only Fix from $1,6002025-12-16 MEDIUM 5.3 CVE-2025-64639 Missing Authorization vulnerability in WP Compress WP Compress for MainWP wp-compress-mainwp allows Exploiting Incorrectly Configured Access Control … Mitigation only Fix from $1,6002025-12-16 MEDIUM 5.3 CVE-2025-66120 Missing Authorization vulnerability in CatFolders CatFolders catfolders allows Exploiting Incorrectly Configured Access Control Security Levels.This … Mitigation only Fix from $1,6002025-12-16 MEDIUM 5.3 CVE-2025-66121 Missing Authorization vulnerability in SiteGround SiteGround Security sg-security allows Exploiting Incorrectly Configured Access Control Security Le… Mitigation only Fix from $1,6002025-12-16 MEDIUM 5.3 CVE-2025-66122 Missing Authorization vulnerability in Design Stylish Price List stylish-price-list allows Exploiting Incorrectly Configured Access Control Security … Mitigation only Fix from $1,6002025-12-16 MEDIUM 5.3 CVE-2025-66124 Missing Authorization vulnerability in ZEEN101 Leaky Paywall leaky-paywall allows Exploiting Incorrectly Configured Access Control Security Levels.Th… Mitigation only Fix from $1,6002025-12-16 MEDIUM 5.3 CVE-2025-64632 Missing Authorization vulnerability in Auctollo Google XML Sitemaps google-sitemap-generator allows Exploiting Incorrectly Configured Access Control … Mitigation only Fix from $1,6002025-12-16 MEDIUM 5.3 CVE-2025-64634 Missing Authorization vulnerability in ThemeFusion Avada avada allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Ava… Avada after 7.13.1 Fix from $1,6002025-12-16 MEDIUM 5.3 CVE-2025-64635 Missing Authorization vulnerability in Syed Balkhi Feeds for YouTube feeds-for-youtube allows Exploiting Incorrectly Configured Access Control Securi… Mitigation only Fix from $1,6002025-12-16 MEDIUM 5.3 CVE-2025-64638 Missing Authorization vulnerability in OnPay.io OnPay.io for WooCommerce onpay-io-for-woocommerce allows Exploiting Incorrectly Configured Access Con… Mitigation only Fix from $1,6002025-12-16 MEDIUM 5.3 CVE-2025-64249 Missing Authorization vulnerability in WP-EXPERTS.IN Protect WP Admin protect-wp-admin allows Exploiting Incorrectly Configured Access Control Securi… Mitigation only Fix from $1,6002025-12-16 MEDIUM 5.3 CVE-2025-11991 The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability … Mitigation only Fix from $1,6002025-12-16 MEDIUM 5.3 CVE-2025-12809 The Dokan Pro plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the `/dokan/v1/wholesale/registe… Mitigation only Fix from $1,6002025-12-16 MEDIUM 5.3 CVE-2025-13956 The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the stat… Mitigation only Fix from $1,6002025-12-16 MEDIUM 6.5 CVE-2025-66402 Misskey is an open source, federated social media platform. Starting in version 13.0.0-beta.16 and prior to version 2025.12.0, an actor who does not … Misskey 2025.12.0+ Fix from $1,6002025-12-16 HIGH 7.0 CVE-2025-14038 EDB Hybrid Manager contains a flaw that allows an unauthenticated attacker to directly access certain gRPC endpoints. This could allow an attacker to… Hybrid Manager 1.3.3 / 2025.12.0+ Fix from $1,9502025-12-15 HIGH 8.2 CVE-2025-65742 An unauthenticated Broken Function Level Authorization (BFLA) vulnerability in Newgen OmniDocs v11.0 allows attackers to obtain sensitive information… Omnidocs No fix yet Fix from $1,9502025-12-15 MEDIUM 5.3 CVE-2025-13950 The OneSignal – Web Push Notifications plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on t… Patch available Fix from $1,6002025-12-15 MEDIUM 6.5 CVE-2025-14508 The MediaCommander – Bring Folders to Media, Posts, and Pages plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capab… Mitigation only Fix from $1,6002025-12-13 HIGH 8.8 CVE-2025-14397 The Postem Ipsum plugin for WordPress is vulnerable to unauthorized modification of data to Privilege Escalation due to a missing capability check on… Mitigation only Fix from $1,9502025-12-13 MEDIUM 5.4 CVE-2025-14446 The Popup Builder (Easy Notify Lite) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the… Mitigation only Fix from $1,6002025-12-13