Total
6931 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2025-66058 | 2026-01-20 | N/A | 6.5 MEDIUM | ||
|
Missing Authorization vulnerability in PickPlugins Post Grid and Gutenberg Blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid and Gutenberg Blocks: from n/a through 2.3.17.
|
|||||
| CVE-2025-66054 | 2026-01-20 | N/A | 7.5 HIGH | ||
|
Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through <= 4.2.9.4.
|
|||||
| CVE-2025-64639 | 2026-01-20 | N/A | 5.3 MEDIUM | ||
|
Missing Authorization vulnerability in WP Compress WP Compress for MainWP wp-compress-mainwp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Compress for MainWP: from n/a through <= 6.50.07.
|
|||||
| CVE-2025-64638 | 2026-01-20 | N/A | 5.3 MEDIUM | ||
|
Missing Authorization vulnerability in OnPay.io OnPay.io for WooCommerce onpay-io-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OnPay.io for WooCommerce: from n/a through <= 1.0.47.
|
|||||
| CVE-2025-64635 | 2026-01-20 | N/A | 5.4 MEDIUM | ||
|
Missing Authorization vulnerability in Syed Balkhi Feeds for YouTube feeds-for-youtube allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Feeds for YouTube: from n/a through <= 2.4.0.
|
|||||
| CVE-2025-64634 | 1 Theme-fusion | 1 Avada | 2026-01-20 | N/A | 8.8 HIGH |
|
Missing Authorization vulnerability in ThemeFusion Avada avada allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Avada: from n/a through <= 7.13.1.
|
|||||
| CVE-2025-64632 | 2026-01-20 | N/A | 5.3 MEDIUM | ||
|
Missing Authorization vulnerability in Auctollo Google XML Sitemaps google-sitemap-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Google XML Sitemaps: from n/a through <= 4.1.21.
|
|||||
| CVE-2025-64631 | 2026-01-20 | N/A | 5.0 MEDIUM | ||
|
Missing Authorization vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCFM Marketplace: from n/a through <= 3.6.15.
|
|||||
| CVE-2025-64630 | 2026-01-20 | N/A | 4.7 MEDIUM | ||
|
Missing Authorization vulnerability in Strategy11 Team Business Directory business-directory-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business Directory: from n/a through <= 6.4.19.
|
|||||
| CVE-2025-64384 | 2026-01-20 | N/A | 6.3 MEDIUM | ||
|
Missing Authorization vulnerability in jetmonsters JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetFormBuilder: from n/a through <= 3.5.3.
|
|||||
| CVE-2025-64382 | 2026-01-20 | N/A | 4.3 MEDIUM | ||
|
Missing Authorization vulnerability in WebToffee Order Export & Order Import for WooCommerce order-import-export-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Export & Order Import for WooCommerce: from n/a through <= 2.6.7.
|
|||||
| CVE-2025-64379 | 1 Booster | 1 Booster For Woocommerce | 2026-01-20 | N/A | 4.3 MEDIUM |
|
Missing Authorization vulnerability in Pluggabl Booster for WooCommerce woocommerce-jetpack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booster for WooCommerce: from n/a through <= 7.4.0.
|
|||||
| CVE-2025-64378 | 2026-01-20 | N/A | 7.5 HIGH | ||
|
Missing Authorization vulnerability in CridioStudio ListingPro listingpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingPro: from n/a through < 2.9.10.
|
|||||
| CVE-2025-64375 | 2026-01-20 | N/A | 6.5 MEDIUM | ||
|
Missing Authorization vulnerability in Mahmudul Hasan Arif WP Social Ninja wp-social-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Social Ninja: from n/a through <= 3.20.1.
|
|||||
| CVE-2025-64370 | 2026-01-20 | N/A | 5.3 MEDIUM | ||
|
Missing Authorization vulnerability in YOP YOP Poll yop-poll allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YOP Poll: from n/a through <= 6.5.38.
|
|||||
| CVE-2025-64369 | 2026-01-20 | N/A | 6.5 MEDIUM | ||
|
Missing Authorization vulnerability in codepeople Contact Form Email contact-form-to-email allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form Email: from n/a through <= 1.3.58.
|
|||||
| CVE-2025-64358 | 2026-01-20 | N/A | 4.3 MEDIUM | ||
|
Missing Authorization vulnerability in WebToffee Smart Coupons for WooCommerce wt-smart-coupons-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Coupons for WooCommerce: from n/a through <= 2.2.3.
|
|||||
| CVE-2025-64356 | 2026-01-20 | N/A | 4.3 MEDIUM | ||
|
Missing Authorization vulnerability in f1logic Insert PHP Code Snippet insert-php-code-snippet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Insert PHP Code Snippet: from n/a through <= 1.4.3.
|
|||||
| CVE-2025-64350 | 2026-01-20 | N/A | 3.8 LOW | ||
|
Missing Authorization vulnerability in Rank Math SEO Rank Math SEO seo-by-rank-math allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rank Math SEO: from n/a through <= 1.0.252.1.
|
|||||
| CVE-2025-64296 | 2026-01-20 | N/A | 5.3 MEDIUM | ||
|
Missing Authorization vulnerability in Facebook Facebook for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Facebook for WooCommerce: from n/a through 3.5.7.
|
|||||
| CVE-2025-64294 | 2026-01-20 | N/A | 5.3 MEDIUM | ||
|
Missing Authorization vulnerability in d3wp WP Snow Effect allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Snow Effect: from n/a through 1.1.15.
|
|||||
| CVE-2025-64285 | 2026-01-20 | N/A | 5.4 MEDIUM | ||
|
Missing Authorization vulnerability in Premmerce Premmerce Wholesale Pricing for WooCommerce premmerce-woocommerce-wholesale-pricing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premmerce Wholesale Pricing for WooCommerce: from n/a through <= 1.1.10.
|
|||||
| CVE-2025-64277 | 2026-01-20 | N/A | 5.3 MEDIUM | ||
|
Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ChatBot: from n/a through <= 7.3.9.
|
|||||
| CVE-2025-64276 | 2026-01-20 | N/A | 6.5 MEDIUM | ||
|
Missing Authorization vulnerability in Ays Pro Survey Maker survey-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Survey Maker: from n/a through <= 5.1.9.4.
|
|||||
| CVE-2025-64274 | 2026-01-20 | N/A | 4.3 MEDIUM | ||
|
Missing Authorization vulnerability in wpkoithemes WPKoi Templates for Elementor wpkoi-templates-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPKoi Templates for Elementor: from n/a through <= 3.4.4.
|
|||||
| CVE-2025-64273 | 2026-01-20 | N/A | 7.5 HIGH | ||
|
Missing Authorization vulnerability in GetResponse Email marketing for WordPress by GetResponse Official getresponse-official allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Email marketing for WordPress by GetResponse Official: from n/a through <= 1.5.3.
|
|||||
| CVE-2025-64269 | 2026-01-20 | N/A | 4.3 MEDIUM | ||
|
Missing Authorization vulnerability in EDGARROJAS WooCommerce PDF Invoice Builder woo-pdf-invoice-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoice Builder: from n/a through <= 1.2.150.
|
|||||
| CVE-2025-64268 | 2026-01-20 | N/A | 7.5 HIGH | ||
|
Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Timetics: from n/a through <= 1.0.44.
|
|||||
| CVE-2025-64265 | 2026-01-20 | N/A | 4.3 MEDIUM | ||
|
Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through <= 23.2.
|
|||||
| CVE-2025-64263 | 2026-01-20 | N/A | 5.4 MEDIUM | ||
|
Missing Authorization vulnerability in PluginEver WP Content Pilot wp-content-pilot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Content Pilot: from n/a through <= 2.1.7.
|
|||||
| CVE-2025-64261 | 2026-01-20 | N/A | 6.5 MEDIUM | ||
|
Missing Authorization vulnerability in codepeople Appointment Booking Calendar appointment-booking-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Appointment Booking Calendar: from n/a through <= 1.3.95.
|
|||||
| CVE-2025-64259 | 2026-01-20 | N/A | 6.5 MEDIUM | ||
|
Missing Authorization vulnerability in Jeroen Schmit Theater for WordPress theatre allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Theater for WordPress: from n/a through <= 0.18.8.
|
|||||
| CVE-2025-64257 | 2026-01-20 | N/A | 4.3 MEDIUM | ||
|
Missing Authorization vulnerability in Joe Dolson My Tickets my-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Tickets: from n/a through <= 2.1.0.
|
|||||
| CVE-2025-64255 | 2026-01-20 | N/A | 7.2 HIGH | ||
|
Missing Authorization vulnerability in Bowo Admin and Site Enhancements (ASE) admin-site-enhancements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Admin and Site Enhancements (ASE): from n/a through <= 8.0.8.
|
|||||
| CVE-2025-64254 | 2026-01-20 | N/A | 8.8 HIGH | ||
|
Missing Authorization vulnerability in Ronald Huereca Photo Block photo-block allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Block: from n/a through <= 1.5.1.
|
|||||
| CVE-2025-64251 | 2026-01-20 | N/A | 4.9 MEDIUM | ||
|
Missing Authorization vulnerability in azzaroco Ultimate Learning Pro indeed-learning-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Learning Pro: from n/a through <= 3.9.3.
|
|||||
| CVE-2025-64249 | 2026-01-20 | N/A | 4.8 MEDIUM | ||
|
Missing Authorization vulnerability in WP-EXPERTS.IN Protect WP Admin protect-wp-admin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Protect WP Admin: from n/a through <= 4.1.
|
|||||
| CVE-2025-64248 | 2026-01-20 | N/A | 4.3 MEDIUM | ||
|
Missing Authorization vulnerability in emarket-design Request a Quote request-a-quote allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Request a Quote: from n/a through <= 2.5.3.
|
|||||
| CVE-2025-64247 | 2026-01-20 | N/A | 6.5 MEDIUM | ||
|
Missing Authorization vulnerability in edmon.parker Read More & Accordion expand-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Read More & Accordion: from n/a through <= 3.5.4.1.
|
|||||
| CVE-2025-64246 | 2026-01-20 | N/A | 4.3 MEDIUM | ||
|
Missing Authorization vulnerability in netopsae Accessibility by AudioEye accessibility-by-audioeye allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility by AudioEye: from n/a through <= 1.0.49.
|
|||||