Browse CVEs

MEDIUM 5.4 CVE-2025-64212 Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro masterstudy-lms-learning-management-system-pro allows Exploiting Incorrectl… Mitigation only Fix from $1,6002025-10-29 MEDIUM 5.4 CVE-2025-64210 Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets masterstudy-elementor-widgets allows Exploiting Incorrectly Confi… Mitigation only Fix from $1,6002025-10-29 MEDIUM 5.3 CVE-2025-64199 Missing Authorization vulnerability in WpEstate wpresidence wpresidence allows Exploiting Incorrectly Configured Access Control Security Levels.This … Mitigation only Fix from $1,6002025-10-29 MEDIUM 5.3 CVE-2025-58711 Missing Authorization vulnerability in solwin Blog Designer PRO blog-designer-pro allows Accessing Functionality Not Properly Constrained by ACLs.Thi… Mitigation only Fix from $1,6002025-10-29 HIGH 8.8 CVE-2025-11702 GitLab has remediated an issue in EE affecting all versions from 17.1 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allow… GitLab 18.3.5 / 18.4.3+ Fix from $1,9502025-10-29 MEDIUM 6.5 CVE-2025-11705 The Anti-Malware Security and Brute-Force Firewall plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 4.… Mitigation only Fix from $1,6002025-10-29 MEDIUM 5.3 CVE-2025-64296 Missing Authorization vulnerability in Facebook Facebook for WooCommerce facebook-for-woocommerce allows Exploiting Incorrectly Configured Access Con… Mitigation only Fix from $1,6002025-10-29 CRITICAL 9.8 CVE-2025-59461 A remote unauthenticated attacker may use the unauthenticated C++ API to access or modify sensitive data and disrupt services. Tloc100 100 Firmware No fix yet Fix from $2,3002025-10-27 MEDIUM 5.3 CVE-2025-62976 Missing Authorization vulnerability in Joovii Sendle Shipping official-sendle-shipping-method allows Accessing Functionality Not Properly Constrained… Mitigation only Fix from $1,6002025-10-27 MEDIUM 5.3 CVE-2025-62977 Missing Authorization vulnerability in 沃之涛 百度站长SEO合集(支持百度/神马/Bing/头条推送) baiduseo allows Accessing Functionality Not Properly Const… Mitigation only Fix from $1,6002025-10-27 MEDIUM 5.4 CVE-2025-62980 Missing Authorization vulnerability in MDZ Persian Admnin Fonts persian-admin-fonts allows Exploiting Incorrectly Configured Access Control Security … Mitigation only Fix from $1,6002025-10-27 MEDIUM 5.3 CVE-2025-62970 Missing Authorization vulnerability in Spencer Haws Link Whisper Free link-whisper allows Exploiting Incorrectly Configured Access Control Security L… Mitigation only Fix from $1,6002025-10-27 MEDIUM 5.3 CVE-2025-62973 Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue af… Buddyforms after 2.9.0 Fix from $1,6002025-10-27 MEDIUM 5.3 CVE-2025-62964 Missing Authorization vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Exploiting Incorrectly Configured Access Contro… Mitigation only Fix from $1,6002025-10-27 MEDIUM 5.5 CVE-2025-62965 Missing Authorization vulnerability in wpseek Admin Management Xtended admin-management-xtended allows Exploiting Incorrectly Configured Access Cont… Mitigation only Fix from $1,6002025-10-27 MEDIUM 5.4 CVE-2025-62966 Missing Authorization vulnerability in Apiki GoCache gocache-cdn allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… No fix yet Fix from $1,6002025-10-27 MEDIUM 5.3 CVE-2025-62944 Missing Authorization vulnerability in Mark O'Donnell MSTW CSV EXPORTER mstw-csv-exporter allows Exploiting Incorrectly Configured Access Control Sec… Mitigation only Fix from $1,6002025-10-27 MEDIUM 5.3 CVE-2025-62946 Missing Authorization vulnerability in everestthemes Everest Backup everest-backup allows Exploiting Incorrectly Configured Access Control Security L… Mitigation only Fix from $1,6002025-10-27 MEDIUM 6.5 CVE-2025-62924 Missing Authorization vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting Incorrectly Configured Access Control S… Mitigation only Fix from $1,6002025-10-27 MEDIUM 5.4 CVE-2025-62925 Missing Authorization vulnerability in Conversios Conversios.io enhanced-e-commerce-for-woocommerce-store allows Exploiting Incorrectly Configured Ac… Mitigation only Fix from $1,6002025-10-27 MEDIUM 6.5 CVE-2025-62927 Missing Authorization vulnerability in Nelio Software Nelio Content nelio-content allows Exploiting Incorrectly Configured Access Control Security Le… No fix yet Fix from $1,6002025-10-27 MEDIUM 6.5 CVE-2025-62929 Missing Authorization vulnerability in PickPlugins Testimonial Slider testimonial allows Exploiting Incorrectly Configured Access Control Security Le… Mitigation only Fix from $1,6002025-10-27 MEDIUM 5.4 CVE-2025-62916 Missing Authorization vulnerability in Travon WP Flights & Hotels Booking WP Plugin adiaha-hotel allows Exploiting Incorrectly Configured Access Cont… Mitigation only Fix from $1,6002025-10-27 MEDIUM 5.4 CVE-2025-62918 Missing Authorization vulnerability in ignitionwp IgnitionDeck ignitiondeck allows Exploiting Incorrectly Configured Access Control Security Levels.T… Mitigation only Fix from $1,6002025-10-27 MEDIUM 5.4 CVE-2025-62919 Missing Authorization vulnerability in themeshopy TS Demo Importer ts-demo-importer allows Exploiting Incorrectly Configured Access Control Security … Mitigation only Fix from $1,6002025-10-27 MEDIUM 5.3 CVE-2025-62922 Missing Authorization vulnerability in Shambhu Patnaik Export Categories export-categories allows Accessing Functionality Not Properly Constrained by… Mitigation only Fix from $1,6002025-10-27 MEDIUM 5.3 CVE-2025-62892 Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Accessing Functionality Not Properly Constrai… Mitigation only Fix from $1,6002025-10-27 MEDIUM 5.3 CVE-2025-62884 Missing Authorization vulnerability in Elliot Sowersby / RelyWP Coupon Affiliates woo-coupon-usage allows Accessing Functionality Not Properly Constr… Mitigation only Fix from $1,6002025-10-27 MEDIUM 6.5 CVE-2025-62889 Missing Authorization vulnerability in KingAddons.com King Addons for Elementor king-addons allows Exploiting Incorrectly Configured Access Control S… Mitigation only Fix from $1,6002025-10-27 HIGH 8.1 CVE-2025-11989 GitLab has remediated an issue in GitLab EE affecting all versions from 17.6.0 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could h… GitLab 18.3.5 / 18.4.3+ Fix from $1,9502025-10-27