Catalog

Findings

Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

Medium6.5Missing Authorization vulnerability in MVPThemes The League the-league allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The L…Vuln · CVE-2026-25454 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Mar 25, 2026
Medium6.5Missing Authorization vulnerability in سید محمدامین هاشمی GZSEO gzseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GZSEO:…Vuln · CVE-2026-25437 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Mar 25, 2026
Medium6.5Missing Authorization vulnerability in CRM Perks Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms cf7-mailchimp allows Exploiting Incorrec…Vuln · CVE-2026-25430 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Mar 25, 2026
High7.5Missing Authorization vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe…Vuln · CVE-2026-25401 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Mar 25, 2026
Medium6.5Missing Authorization vulnerability in Webilia Inc.Vuln · CVE-2026-25398 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Mar 25, 2026
High7.5Missing Authorization vulnerability in CoderPress Commerce Coinbase For WooCommerce commerce-coinbase-for-woocommerce allows Exploiting Incorrectly Configured Access C…Vuln · CVE-2026-25396 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.3%Mar 25, 2026
Medium6.5Missing Authorization vulnerability in Saad Iqbal New User Approve new-user-approve allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…Vuln · CVE-2026-25390 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Mar 25, 2026
Medium6.5Missing Authorization vulnerability in Özgür KARALAR Kargo Takip kargo-takip-turkiye allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…Vuln · CVE-2026-25365 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Mar 25, 2026
Medium6.5Missing Authorization vulnerability in Rustaurius Five Star Restaurant Reservations restaurant-reservations allows Exploiting Incorrectly Configured Access Control Sec…Vuln · CVE-2026-25327 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Mar 25, 2026
High7.5Missing Authorization vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerce woocommerce-delivery-notes allows Exploiting Incorrectly Configure…Vuln · CVE-2026-25317 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.3%Mar 25, 2026
High7.5Missing Authorization vulnerability in PublishPress PublishPress Authors publishpress-authors allows Exploiting Incorrectly Configured Access Control Security Levels.T…Vuln · CVE-2026-25309 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Mar 25, 2026
Medium6.5Missing Authorization vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Exploiting Incorrectly Configured Access Control Security Levels…Vuln · CVE-2026-25034 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Mar 25, 2026
High7.5Missing Authorization vulnerability in RadiusTheme Team tlp-team allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team: from…Vuln · CVE-2026-25026 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Mar 25, 2026
Medium6.5Missing Authorization vulnerability in raratheme Education Zone education-zone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec…Vuln · CVE-2026-25009 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Mar 25, 2026
Medium6.5Missing Authorization vulnerability in activity-log.com WP System Log winterlock allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff…Vuln · CVE-2026-24987 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Mar 25, 2026
Medium6.5Missing Authorization vulnerability in Elated-Themes Elated Listing eltd-listing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff…Vuln · CVE-2026-24972 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Mar 25, 2026
High7.5Missing Authorization vulnerability in wproyal News Magazine X news-magazine-x allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec…Vuln · CVE-2026-24382 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Mar 25, 2026
Medium6.5Missing Authorization vulnerability in Javier Casares WPVulnerability wpvulnerability allows Exploiting Incorrectly Configured Access Control Security Levels.This issu…Vuln · CVE-2026-24376 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Mar 25, 2026
High7.1Missing Authorization vulnerability in ThemeOne The Grid allows Exploiting Incorrectly Configured Access Control Security Levels.Vuln · CVE-2026-24369 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Mar 25, 2026
Medium6.5Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe…Vuln · CVE-2026-24364 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Mar 25, 2026
High7.5Missing Authorization vulnerability in loopus WP Cost Estimation & Payment Forms Builder WP_Estimation_Form allows Exploiting Incorrectly Configured Access Control Sec…Vuln · CVE-2026-24363 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Mar 25, 2026
Medium6.4Missing Authorization vulnerability in bdthemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…Vuln · CVE-2026-24362 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Mar 25, 2026
High7.5Missing Authorization vulnerability in WPFactory Helpdesk Support Ticket System for WooCommerce support-ticket-system-for-woocommerce allows Exploiting Incorrectly Con…Vuln · CVE-2026-23977 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.4%Mar 25, 2026
Medium6.5Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Ac…Vuln · CVE-2026-23972 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.3%Mar 25, 2026
High7.5Missing Authorization vulnerability in BlueGlass Interactive AG Jobs for WordPress job-postings allows Exploiting Incorrectly Configured Access Control Security Levels…Vuln · CVE-2026-23806 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.4%Mar 25, 2026