Browse CVEs

CRITICAL 9.8 CVE-2025-9054 The MultiLoca - WooCommerce Multi Locations Inventory Management plugin for WordPress is vulnerable to unauthorized modification of data that can lea… Mitigation only Fix from $2,3002025-09-24 MEDIUM 6.8 CVE-2025-55038 An authorization bypass vulnerability has been discovered in the Click Plus C2-03CPU2 device firmware version 3.60. Through the KOPR protocol utilize… Mitigation only Fix from $1,6002025-09-23 HIGH 7.6 CVE-2025-59826 Flag Forge is a Capture The Flag (CTF) platform. In version 2.1.0, non-admin users can create arbitrary challenges, potentially introducing malicious… Flagforge Mitigation only Fix from $1,9502025-09-23 HIGH 8.2 CVE-2025-10184 The vulnerability allows any application installed on the device to read SMS/MMS data and metadata from the system-provided Telephony provider withou… Mitigation only Fix from $1,9502025-09-23 MEDIUM 6.5 CVE-2025-59581 Missing Authorization vulnerability in VW THEMES Ibtana ibtana-visual-editor allows Exploiting Incorrectly Configured Access Control Security Levels.… Mitigation only Fix from $1,6002025-09-22 MEDIUM 6.5 CVE-2025-59576 Missing Authorization vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Exploiting Incorrectly Configured A… Mitigation only Fix from $1,6002025-09-22 MEDIUM 5.5 CVE-2025-59567 Missing Authorization vulnerability in Elliot Sowersby / RelyWP Coupon Affiliates woo-coupon-usage allows Exploiting Incorrectly Configured Access Co… Mitigation only Fix from $1,6002025-09-22 MEDIUM 5.0 CVE-2025-58968 Missing Authorization vulnerability in Christiaan Pieterse MaxiBlocks maxi-blocks allows Exploiting Incorrectly Configured Access Control Security Le… Mitigation only Fix from $1,6002025-09-22 MEDIUM 5.3 CVE-2025-58969 Missing Authorization vulnerability in Greg Winiarski Custom Login URL custom-login-url allows Exploiting Incorrectly Configured Access Control Secur… Mitigation only Fix from $1,6002025-09-22 MEDIUM 5.3 CVE-2025-58685 Missing Authorization vulnerability in cecabank Cecabank WooCommerce Plugin cecabank-woocommerce allows Exploiting Incorrectly Configured Access Cont… Mitigation only Fix from $1,6002025-09-22 MEDIUM 6.5 CVE-2025-58678 Missing Authorization vulnerability in PickPlugins Accordion accordions allows Exploiting Incorrectly Configured Access Control Security Levels.This … Mitigation only Fix from $1,6002025-09-22 MEDIUM 5.3 CVE-2025-58679 Missing Authorization vulnerability in AppMySite AppMySite appmysite allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… Mitigation only Fix from $1,6002025-09-22 MEDIUM 6.5 CVE-2025-58680 Missing Authorization vulnerability in gutentor Gutentor gutentor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue … Mitigation only Fix from $1,6002025-09-22 MEDIUM 5.3 CVE-2025-58681 Missing Authorization vulnerability in Jürgen Müller Easy Quotes easy-quotes allows Exploiting Incorrectly Configured Access Control Security Levels.… Mitigation only Fix from $1,6002025-09-22 MEDIUM 5.4 CVE-2025-58672 Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured Access Control Security Leve… Mitigation only Fix from $1,6002025-09-22 MEDIUM 5.4 CVE-2025-58667 Missing Authorization vulnerability in CridioStudio ListingPro Reviews listingpro-reviews allows Exploiting Incorrectly Configured Access Control Sec… Mitigation only Fix from $1,6002025-09-22 CRITICAL 9.8 CVE-2025-58668 Missing Authorization vulnerability in VibeThemes WPLMS wplms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… Wordpress Learning Management System 4.971+ Fix from $2,3002025-09-22 MEDIUM 5.4 CVE-2025-58660 Missing Authorization vulnerability in brandexponents Oshine Core oshine-core allows Exploiting Incorrectly Configured Access Control Security Levels… Mitigation only Fix from $1,6002025-09-22 MEDIUM 5.4 CVE-2025-58650 Missing Authorization vulnerability in Syed Balkhi All In One SEO Pack all-in-one-seo-pack allows Exploiting Incorrectly Configured Access Control Se… Mitigation only Fix from $1,6002025-09-22 MEDIUM 5.3 CVE-2025-58247 Missing Authorization vulnerability in templateinvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows Exploiting Incorrectly Configured Acce… Mitigation only Fix from $1,6002025-09-22 MEDIUM 5.3 CVE-2025-58222 Missing Authorization vulnerability in Maidul Team Manager wp-team-manager allows Exploiting Incorrectly Configured Access Control Security Levels.Th… Mitigation only Fix from $1,6002025-09-22 MEDIUM 5.3 CVE-2025-58029 Missing Authorization vulnerability in Sumit Singh Classic Widgets with Block-based Widgets classic-widgets-with-block-based-widgets allows Accessing… Mitigation only Fix from $1,6002025-09-22 MEDIUM 5.3 CVE-2025-58000 Missing Authorization vulnerability in memberful Memberful - Membership Plugin memberful-wp allows Accessing Functionality Not Properly Constrained b… Mitigation only Fix from $1,6002025-09-22 MEDIUM 5.3 CVE-2025-58003 Missing Authorization vulnerability in javothemes Javo Core javo-core allows Exploiting Incorrectly Configured Access Control Security Levels.This is… Mitigation only Fix from $1,6002025-09-22 MEDIUM 5.3 CVE-2025-58004 Missing Authorization vulnerability in SmartDataSoft DriCub dricub-driving-school allows Exploiting Incorrectly Configured Access Control Security Le… Mitigation only Fix from $1,6002025-09-22 MEDIUM 5.3 CVE-2025-57987 Missing Authorization vulnerability in ThimPress WP Events Manager wp-events-manager allows Exploiting Incorrectly Configured Access Control Security… No fix yet Fix from $1,6002025-09-22 MEDIUM 5.4 CVE-2025-57990 Missing Authorization vulnerability in solwininfotech Blog Designer blog-designer allows Exploiting Incorrectly Configured Access Control Security Le… Mitigation only Fix from $1,6002025-09-22 MEDIUM 5.4 CVE-2025-57991 Missing Authorization vulnerability in Clariti Clariti clariti allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… Mitigation only Fix from $1,6002025-09-22 MEDIUM 5.3 CVE-2025-57976 Missing Authorization vulnerability in CardCom CardCom Payment Gateway woo-cardcom-payment-gateway allows Exploiting Incorrectly Configured Access Co… Mitigation only Fix from $1,6002025-09-22 MEDIUM 5.3 CVE-2025-57971 Missing Authorization vulnerability in SALESmanago SALESmanago & Leadoo salesmanago allows Exploiting Incorrectly Configured Access Control Security … Mitigation only Fix from $1,6002025-09-22