Total
6931 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2025-58207 | 2026-01-20 | N/A | 8.2 HIGH | ||
|
Missing Authorization vulnerability in WP Messiah Ai Image Alt Text Generator for WP ai-image-alt-text-generator-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ai Image Alt Text Generator for WP: from n/a through <= 1.1.5.
|
|||||
| CVE-2025-54751 | 2026-01-20 | N/A | 7.1 HIGH | ||
|
Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PostX: from n/a through <= 4.1.36.
|
|||||
| CVE-2025-54745 | 2026-01-20 | N/A | 6.5 MEDIUM | ||
|
Missing Authorization vulnerability in miniOrange miniOrange's Google Authenticator miniorange-2-factor-authentication allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects miniOrange's Google Authenticator: from n/a through <= 6.1.1.
|
|||||
| CVE-2025-54743 | 2026-01-20 | N/A | 5.3 MEDIUM | ||
|
Missing Authorization vulnerability in mkscripts Download After Email download-after-email allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download After Email: from n/a through 2.1.5-2.1.6.
|
|||||
| CVE-2025-54741 | 2026-01-20 | N/A | 8.6 HIGH | ||
|
Missing Authorization vulnerability in Tyler Moore Super Blank super-blank allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Super Blank: from n/a through <= 1.2.0.
|
|||||
| CVE-2025-54711 | 2026-01-20 | N/A | 7.1 HIGH | ||
|
Missing Authorization vulnerability in bPlugins Info Cards info-cards allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Info Cards: from n/a through <= 1.0.11.
|
|||||
| CVE-2025-54045 | 2026-01-20 | N/A | 4.3 MEDIUM | ||
|
Missing Authorization vulnerability in CreativeMindsSolutions CM On Demand Search And Replace cm-on-demand-search-and-replace allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CM On Demand Search And Replace: from n/a through <= 1.5.4.
|
|||||
| CVE-2025-54005 | 2026-01-20 | N/A | 4.3 MEDIUM | ||
|
Missing Authorization vulnerability in sonalsinha21 SKT Page Builder skt-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SKT Page Builder: from n/a through <= 4.9.
|
|||||
| CVE-2025-54004 | 2026-01-20 | N/A | 2.6 LOW | ||
|
Missing Authorization vulnerability in WC Lovers WCFM – Frontend Manager for WooCommerce wc-frontend-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCFM – Frontend Manager for WooCommerce: from n/a through <= 6.7.21.
|
|||||
| CVE-2025-53424 | 2026-01-20 | N/A | 6.5 MEDIUM | ||
|
Missing Authorization vulnerability in vanquish WooCommerce Orders & Customers Exporter woocommerce-orders-ei allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Orders & Customers Exporter: from n/a through <= 5.4.
|
|||||
| CVE-2025-53421 | 2026-01-20 | N/A | 6.3 MEDIUM | ||
|
Missing Authorization vulnerability in PickPlugins Accordion accordions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accordion: from n/a through <= 2.3.14.
|
|||||
| CVE-2025-53246 | 2026-01-20 | N/A | 8.8 HIGH | ||
|
Missing Authorization vulnerability in Gaurav Aggarwal Backup and Move backup-and-move allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Backup and Move: from n/a through <= 0.1.
|
|||||
| CVE-2025-53236 | 2026-01-20 | N/A | 6.3 MEDIUM | ||
|
Missing Authorization vulnerability in AndonDesign UDesign Core u-design-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UDesign Core: from n/a through <= 4.14.0.
|
|||||
| CVE-2025-53214 | 2026-01-20 | N/A | 9.1 CRITICAL | ||
|
Missing Authorization vulnerability in sertifier Sertifier Certificate & Badge Maker sertifier-certificates-open-badges allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sertifier Certificate & Badge Maker: from n/a through <= 1.21.
|
|||||
| CVE-2025-52757 | 2026-01-20 | N/A | 6.3 MEDIUM | ||
|
Missing Authorization vulnerability in FantasticPlugins SUMO Memberships for WooCommerce sumomemberships allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SUMO Memberships for WooCommerce: from n/a through <= 7.6.0.
|
|||||
| CVE-2025-52738 | 2026-01-20 | N/A | 6.5 MEDIUM | ||
|
Missing Authorization vulnerability in Wikimedia Foundation Wikipedia Preview wikipedia-preview allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wikipedia Preview: from n/a through <= 1.15.0.
|
|||||
| CVE-2025-49961 | 2026-01-20 | N/A | 6.3 MEDIUM | ||
|
Missing Authorization vulnerability in Breeze Team Breeze Checkout breeze-checkout allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breeze Checkout: from n/a through <= 1.4.0.
|
|||||
| CVE-2025-49950 | 2026-01-20 | N/A | 7.3 HIGH | ||
|
Missing Authorization vulnerability in billingo Official Integration for Billingo billingo allows Privilege Escalation.This issue affects Official Integration for Billingo: from n/a through <= 4.2.5.
|
|||||
| CVE-2025-49949 | 2026-01-20 | N/A | 5.5 MEDIUM | ||
|
Missing Authorization vulnerability in templazee Templazee templazee allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Templazee: from n/a through <= 1.0.2.
|
|||||
| CVE-2025-49937 | 2026-01-20 | N/A | 4.3 MEDIUM | ||
|
Missing Authorization vulnerability in Syed Balkhi Smash Balloon Social Post Feed custom-facebook-feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smash Balloon Social Post Feed: from n/a through <= 4.3.2.
|
|||||
| CVE-2025-49925 | 1 Vibethemes | 1 Wordpress Learning Management System | 2026-01-20 | N/A | 7.3 HIGH |
|
Missing Authorization vulnerability in VibeThemes WPLMS wplms_plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPLMS: from n/a through <= 1.9.9.7.
|
|||||
| CVE-2025-49922 | 2026-01-20 | N/A | 4.3 MEDIUM | ||
|
Missing Authorization vulnerability in etruel WPeMatico RSS Feed Fetcher wpematico allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPeMatico RSS Feed Fetcher: from n/a through <= 2.8.3.
|
|||||
| CVE-2025-49920 | 2026-01-20 | N/A | 5.4 MEDIUM | ||
|
Missing Authorization vulnerability in accessiBe Web Accessibility By accessiBe accessibe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Web Accessibility By accessiBe: from n/a through <= 2.10.
|
|||||
| CVE-2025-49916 | 2026-01-20 | N/A | 8.6 HIGH | ||
|
Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MultiVendorX: from n/a through <= 4.2.23.
|
|||||
| CVE-2025-49913 | 2026-01-20 | N/A | 5.3 MEDIUM | ||
|
Missing Authorization vulnerability in CoSchedule CoSchedule coschedule-by-todaymade allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CoSchedule: from n/a through <= 3.4.0.
|
|||||
| CVE-2025-49910 | 2026-01-20 | N/A | 8.2 HIGH | ||
|
Missing Authorization vulnerability in AmentoTech Private Limited WPGuppy wpguppy-lite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPGuppy: from n/a through <= 1.1.4.
|
|||||
| CVE-2025-49907 | 2026-01-20 | N/A | 4.3 MEDIUM | ||
|
Missing Authorization vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MDTF: from n/a through <= 1.3.3.9.
|
|||||
| CVE-2025-49906 | 2026-01-20 | N/A | 5.3 MEDIUM | ||
|
Missing Authorization vulnerability in StellarWP WPComplete wpcomplete allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPComplete: from n/a through <= 2.9.5.3.
|
|||||
| CVE-2025-49903 | 2026-01-20 | N/A | 5.3 MEDIUM | ||
|
Missing Authorization vulnerability in bdthemes ZoloBlocks zoloblocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ZoloBlocks: from n/a through <= 2.3.11.
|
|||||
| CVE-2025-49902 | 2026-01-20 | N/A | 6.5 MEDIUM | ||
|
Missing Authorization vulnerability in A WP Life Login Page Customizer – Customizer Login Page, Admin Page, Custom Design customizer-login-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login Page Customizer – Customizer Login Page, Admin Page, Custom Design: from n/a through <= 2.1.1.
|
|||||
| CVE-2025-49899 | 2026-01-20 | N/A | 5.3 MEDIUM | ||
|
Missing Authorization vulnerability in jjlemstra Whydonate wp-whydonate allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Whydonate: from n/a through <= 4.0.15.
|
|||||
| CVE-2025-49394 | 2026-01-20 | N/A | 8.8 HIGH | ||
|
Missing Authorization vulnerability in bPlugins Image Gallery block – Create and display photo gallery/photo album. 3d-image-gallery allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Image Gallery block – Create and display photo gallery/photo album.: from n/a through <= 1.0.7.
|
|||||
| CVE-2025-49377 | 2026-01-20 | N/A | 7.5 HIGH | ||
|
Missing Authorization vulnerability in Themefic Hydra Booking hydra-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hydra Booking: from n/a through <= 1.1.9.
|
|||||
| CVE-2025-49376 | 2026-01-20 | N/A | 7.5 HIGH | ||
|
Missing Authorization vulnerability in DELUCKS DELUCKS SEO delucks-seo allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects DELUCKS SEO: from n/a through <= 2.5.9.
|
|||||
| CVE-2025-49356 | 2026-01-20 | N/A | 4.3 MEDIUM | ||
|
Missing Authorization vulnerability in Mykola Lukin Orders Chat for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Orders Chat for WooCommerce: from n/a through 1.2.0.
|
|||||
| CVE-2025-49350 | 2026-01-20 | N/A | 4.3 MEDIUM | ||
|
Missing Authorization vulnerability in marcoingraiti Actionwear products sync actionwear-products-sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Actionwear products sync: from n/a through <= 2.3.3.
|
|||||
| CVE-2025-49349 | 2026-01-20 | N/A | 5.3 MEDIUM | ||
|
Missing Authorization vulnerability in Reuters News Agency Reuters Direct allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Reuters Direct: from n/a through 3.0.0.
|
|||||
| CVE-2025-49348 | 2026-01-20 | N/A | 5.3 MEDIUM | ||
|
Missing Authorization vulnerability in Hype Hype pico allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hype: from n/a through <= 1.0.5.
|
|||||
| CVE-2025-49339 | 2026-01-20 | N/A | 4.3 MEDIUM | ||
|
Missing Authorization vulnerability in Digages Direct Payments WP allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Direct Payments WP: from n/a through 1.3.0.
|
|||||
| CVE-2025-49338 | 2026-01-20 | N/A | 5.3 MEDIUM | ||
|
Missing Authorization vulnerability in Flowbox allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flowbox: from n/a through 1.1.5.
|
|||||