Skip to main content
CVE-2025-30467 Mar 31, 23:15 MEDIUM This Month

The issue was addressed with improved checks. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Apple
NVD
CVSS 3.1
4.3
EPSS
0.3%
CVE-2025-31546 Mar 31, 13:15 MEDIUM This Month

Missing Authorization vulnerability in WP Messiah Swiss Toolkit For WP allows Exploiting Incorrectly Configured Access Control Security Levels.3.0. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Wordpress Plugin
NVD
CVSS 3.1
4.3
EPSS
0.2%
CVE-2025-30155 Mar 31, 16:15 MEDIUM PATCH This Month

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. This Incorrect Authorization vulnerability could allow attackers to bypass authorization checks to access restricted resources.

Authentication Bypass Tuleap Enalean
NVD GitHub
CVSS 3.1
4.3
EPSS
0.2%
CVE-2025-31611 Mar 31, 13:15 MEDIUM This Month

Missing Authorization vulnerability in Shaharia Azam Auto Post After Image Upload allows Exploiting Incorrectly Configured Access Control Security Levels.6. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Wordpress Plugin
NVD
CVSS 3.1
4.3
EPSS
0.2%
CVE-2025-31596 Mar 31, 13:15 MEDIUM This Month

Missing Authorization vulnerability in Chatwee Chat by Chatwee allows Exploiting Incorrectly Configured Access Control Security Levels.1.3. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Wordpress Plugin
NVD
CVSS 3.1
4.3
EPSS
0.2%
CVE-2025-31576 Mar 31, 13:15 MEDIUM This Month

Missing Authorization vulnerability in Gagan Deep Singh PostmarkApp Email Integrator allows Exploiting Incorrectly Configured Access Control Security Levels.4. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Wordpress Plugin
NVD
CVSS 3.1
4.3
EPSS
0.2%
CVE-2025-31530 Mar 31, 13:15 MEDIUM This Month

Missing Authorization vulnerability in smackcoders Google SEO Pressor Snippet allows Exploiting Incorrectly Configured Access Control Security Levels.0. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Google Wordpress Plugin
NVD
CVSS 3.1
4.3
EPSS
0.2%
CVE-2025-31529 Mar 31, 13:15 MEDIUM This Month

Missing Authorization vulnerability in Rashid Slider Path for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.0.0. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Wordpress Plugin
NVD
CVSS 3.1
4.3
EPSS
0.2%
CVE-2025-31528 Mar 31, 13:15 MEDIUM This Month

Missing Authorization vulnerability in wokamoto StaticPress allows Exploiting Incorrectly Configured Access Control Security Levels.4.5. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Wordpress Plugin
NVD
CVSS 3.1
4.3
EPSS
0.2%
CVE-2025-31376 Mar 31, 10:15 MEDIUM This Month

Missing Authorization vulnerability in Mayeenul Islam NanoSupport allows Exploiting Incorrectly Configured Access Control Security Levels.6.0. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Wordpress Plugin
NVD
CVSS 3.1
4.3
EPSS
0.2%
CVE-2025-31406 Mar 31, 09:15 MEDIUM This Month

Subscriber Broken Access Control in ELEX WooCommerce Request a Quote <= 2.3.3 versions. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass
NVD
CVSS 3.1
4.3
EPSS
0.2%
CVE-2025-31417 Mar 31, 06:15 MEDIUM This Month

Missing Authorization vulnerability in Fahad Mahmood WP Docs allows Exploiting Incorrectly Configured Access Control Security Levels. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Wordpress Plugin
NVD
CVSS 3.1
4.3
EPSS
0.2%
CVE-2025-31609 Mar 31, 13:15 MEDIUM This Month

Missing Authorization vulnerability in Arni Cinco WPCargo Track & Trace allows Exploiting Incorrectly Configured Access Control Security Levels.0.6. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Wordpress Plugin
NVD
CVSS 3.1
4.3
EPSS
0.2%
CVE-2025-31544 Mar 31, 13:15 MEDIUM This Month

Missing Authorization vulnerability in WP Messiah Swiss Toolkit For WP allows Exploiting Incorrectly Configured Access Control Security Levels.3.0. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Wordpress Plugin
NVD
CVSS 3.1
4.3
EPSS
0.2%
CVE-2025-31540 Mar 31, 13:15 MEDIUM This Month

Missing Authorization vulnerability in acmemediakits ACME Divi Modules allows Exploiting Incorrectly Configured Access Control Security Levels.3.5. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Wordpress Plugin
NVD
CVSS 3.1
4.3
EPSS
0.2%
CVE-2025-31602 Mar 31, 13:15 MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability in apimofficiel Apimo Connector allows Cross Site Request Forgery.6.3.1. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Wordpress Plugin
NVD
CVSS 3.1
4.3
EPSS
0.1%
CVE-2025-31600 Mar 31, 13:15 MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability in designnbuy DesignO allows Cross Site Request Forgery.2.0. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Wordpress Plugin
NVD
CVSS 3.1
4.3
EPSS
0.1%
CVE-2025-31572 Mar 31, 13:15 MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability in v20202020 Multi Days Events and Multi Events in One Day Calendar allows Cross Site Request Forgery.1.3. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Wordpress Plugin
NVD
CVSS 3.1
4.3
EPSS
0.1%
CVE-2025-31410 Mar 31, 09:15 MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability in Ashish Ajani WP Church Donation allows Cross Site Request Forgery.7. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Wordpress Plugin
NVD
CVSS 3.1
4.3
EPSS
0.1%
CVE-2025-2989 Mar 31, 10:15 MEDIUM POC This Week

A vulnerability was found in Tenda FH1202 1.2.0.14(408). Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Tenda Fh1202 Firmware
NVD VulDB
CVSS 4.0
6.9
EPSS
0.4%
CVE-2025-2973 Mar 31, 03:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in code-projects College Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Authentication Bypass File Upload College Management System Code Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.3%
Prev Page 5 of 5

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy