CVE Feed

    Dashboard / CVE

    5.3
    Medium

    CVE-2024-37427

    Last Modified: 15 Apr 2026

    Missing Authorization vulnerability in Arraytics Timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Timetics: from n/a through 1.0.21.

    Published: 1 Nov 2024
    5.4
    Medium

    CVE-2024-37439

    Last Modified: 15 Apr 2026

    Missing Authorization vulnerability in Uncanny Owl Uncanny Toolkit Pro for LearnDash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Toolkit Pro for LearnDash: from n/a through 4.1.4.0

    Published: 1 Nov 2024
    4.3
    Medium

    CVE-2024-37440

    Last Modified: 23 Apr 2026

    Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.4.4.

    Published: 1 Nov 2024
    4.3
    Medium

    CVE-2024-37443

    Last Modified: 15 Apr 2026

    Missing Authorization vulnerability in Automattic WP Job Manager - Resume Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Manager - Resume Manager: from n/a through 2.1.0.

    Published: 1 Nov 2024
    5.3
    Medium

    CVE-2024-37444

    Last Modified: 23 Apr 2026

    Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Defender Security defender-security.This issue affects Defender Security: from n/a through <= 4.7.1.

    Published: 1 Nov 2024
    4.3
    Medium

    CVE-2024-37453

    Last Modified: 10 Feb 2025

    Missing Authorization vulnerability in ProfileGrid User Profiles ProfileGrid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfileGrid: from n/a through 5.8.7.

    Published: 1 Nov 2024
    5.3
    Medium

    CVE-2024-37456

    Last Modified: 15 Apr 2026

    Missing Authorization vulnerability in Noptin Newsletter Noptin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Noptin: from n/a through 3.4.2.

    Published: 1 Nov 2024
    5.3
    Medium

    CVE-2024-37463

    Last Modified: 7 Feb 2025

    Missing Authorization vulnerability in CRM Perks CRM Perks Forms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects CRM Perks Forms: from n/a through 1.1.5.

    Published: 1 Nov 2024
    5.3
    Medium

    CVE-2024-37468

    Last Modified: 15 Apr 2026

    Missing Authorization vulnerability in blazethemes Newsmatic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Newsmatic: from n/a through 1.3.1.

    Published: 1 Nov 2024
    8.2
    High

    CVE-2024-37470

    Last Modified: 11 Aug 2025

    Missing Authorization vulnerability in WofficeIO Woffice Core allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Woffice Core: from n/a through 5.4.8.

    Published: 1 Nov 2024
    5.3
    Medium

    CVE-2024-37475

    Last Modified: 15 Apr 2026

    Missing Authorization vulnerability in Automattic Newspack Newsletters allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Newspack Newsletters: from n/a through 2.13.2.

    Published: 1 Nov 2024
    6.5
    Medium

    CVE-2024-37477

    Last Modified: 15 Apr 2026

    Missing Authorization vulnerability in Automattic Newspack Content Converter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Newspack Content Converter: from n/a through 0.1.5.

    Published: 1 Nov 2024
    6.5
    Medium

    CVE-2024-37481

    Last Modified: 23 Apr 2026

    Missing Authorization vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through <= 7.7.4.

    Published: 1 Nov 2024
    4.3
    Medium

    CVE-2024-37482

    Last Modified: 23 Apr 2026

    Missing Authorization vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through <= 7.7.4.

    Published: 1 Nov 2024
    5.4
    Medium

    CVE-2024-37483

    Last Modified: 23 Apr 2026

    Missing Authorization vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through <= 7.7.4.

    Published: 1 Nov 2024
    4.3
    Medium

    CVE-2024-37505

    Last Modified: 9 Jan 2026

    Missing Authorization vulnerability in Rara Themes Business One Page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business One Page: from n/a through 1.2.9.

    Published: 1 Nov 2024
    5.3
    Medium

    CVE-2024-37506

    Last Modified: 15 Apr 2026

    Missing Authorization vulnerability in Charitable Donations & Fundraising Team Charitable allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Charitable: from n/a through 1.8.1.7.

    Published: 1 Nov 2024
    6.5
    Medium

    CVE-2024-37510

    Last Modified: 15 Apr 2026

    Missing Authorization vulnerability in Charitable Donations & Fundraising Team Charitable allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Charitable: from n/a through 1.8.1.7.

    Published: 1 Nov 2024
    6.3
    Medium

    CVE-2024-37516

    Last Modified: 15 Apr 2026

    Missing Authorization vulnerability in fifu.App Featured Image from URL allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Image from URL: from n/a through 4.8.2.

    Published: 1 Nov 2024
    4.3
    Medium

    CVE-2024-37517

    Last Modified: 4 Nov 2024

    Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spectra: from n/a through 2.13.7.

    Published: 1 Nov 2024
    5.3
    Medium

    CVE-2024-37921

    Last Modified: 15 Apr 2026

    Missing Authorization vulnerability in Kiboko Labs Chained Quiz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chained Quiz: from n/a through 1.3.2.8.

    Published: 1 Nov 2024
    5.3
    Medium

    CVE-2024-37926

    Last Modified: 15 Apr 2026

    Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper (WAH) allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Accessibility Helper (WAH): from n/a through 0.6.2.9.

    Published: 1 Nov 2024
    6.3
    Medium

    CVE-2024-37929

    Last Modified: 28 Apr 2026

    Missing Authorization vulnerability in solwin User Activity Log Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Activity Log Pro: from n/a through 2.3.4.

    Published: 1 Nov 2024
    5.3
    Medium

    CVE-2024-38690

    Last Modified: 15 Apr 2026

    Missing Authorization vulnerability in Avirtum iPanorama 360 WordPress Virtual Tour Builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects iPanorama 360 WordPress Virtual Tour Builder: from n/a through 1.8.3.

    Published: 1 Nov 2024
    4.3
    Medium

    CVE-2024-38695

    Last Modified: 15 Apr 2026

    Missing Authorization vulnerability in Martin Gibson WP GoToWebinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP GoToWebinar: from n/a through 15.6.

    Published: 1 Nov 2024
    5.3
    Medium

    CVE-2024-38702

    Last Modified: 15 Apr 2026

    Missing Authorization vulnerability in Tyche Softwares Product Delivery Date for WooCommerce – Lite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Product Delivery Date for WooCommerce – Lite: from n/a through 2.7.2.

    Published: 1 Nov 2024
    6.3
    Medium

    CVE-2024-38707

    Last Modified: 24 Mar 2025

    Missing Authorization vulnerability in WPDeveloper EmbedPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EmbedPress: from n/a through 4.0.4.

    Published: 1 Nov 2024
    4.3
    Medium

    CVE-2024-38714

    Last Modified: 23 Apr 2026

    Missing Authorization vulnerability in Epsiloncool WP Fast Total Search fulltext-search.This issue affects WP Fast Total Search: from n/a through <= 1.68.232.

    Published: 1 Nov 2024
    4.3
    Medium

    CVE-2024-38719

    Last Modified: 15 Apr 2026

    Missing Authorization vulnerability in Creative Motion Auto Featured Image (Auto Post Thumbnail) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Auto Featured Image (Auto Post Thumbnail): from n/a through 4.1.2.

    Published: 1 Nov 2024
    7.1
    High

    CVE-2024-38721

    Last Modified: 15 Apr 2026

    Missing Authorization vulnerability in spider-themes EazyDocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EazyDocs: from n/a through 2.5.0.

    Published: 1 Nov 2024
    7.5
    High

    CVE-2024-38726

    Last Modified: 15 Apr 2026

    Missing Authorization vulnerability in PickPlugins Product Designer allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Product Designer: from n/a through 1.0.33.

    Published: 1 Nov 2024
    4.3
    Medium

    CVE-2024-38727

    Last Modified: 15 Apr 2026

    Missing Authorization vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seraphinite Post .DOCX Source: from n/a through 2.16.9.

    Published: 1 Nov 2024
    5.4
    Medium

    CVE-2024-38733

    Last Modified: 15 Apr 2026

    Missing Authorization vulnerability in Meks Meks Video Importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Meks Video Importer: from n/a through 1.0.12.

    Published: 1 Nov 2024
    5.4
    Medium

    CVE-2024-38737

    Last Modified: 15 Apr 2026

    Missing Authorization vulnerability in Reservation Diary ReDi Restaurant Reservation allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects ReDi Restaurant Reservation: from n/a through 24.0422.

    Published: 1 Nov 2024
    5.4
    Medium

    CVE-2024-38740

    Last Modified: 15 Apr 2026

    Missing Authorization vulnerability in Packlink Shipping S.L. Packlink PRO shipping module allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Packlink PRO shipping module: from n/a through 3.4.6.

    Published: 1 Nov 2024
    5.3
    Medium

    CVE-2024-38743

    Last Modified: 15 Apr 2026

    Access Control vulnerability in Upqode Plum: Spin Wheel & Email Pop-up allows . This issue affects Plum: Spin Wheel & Email Pop-up: from n/a through 2.0.

    Published: 1 Nov 2024
    8.3
    High

    CVE-2024-38744

    Last Modified: 15 Apr 2026

    Missing Authorization vulnerability in Upqode Plum: Spin Wheel & Email Pop-up allows Accessing Functionality Not Properly Constrained by ACLs, Stored XSS.This issue affects Plum: Spin Wheel & Email Pop-up: from n/a through 2.0.

    Published: 1 Nov 2024
    5.3
    Medium

    CVE-2024-38745

    Last Modified: 15 Apr 2026

    Missing Authorization vulnerability in Rymera Web Co Wholesale Suite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Wholesale Suite: from n/a through 2.1.12.

    Published: 1 Nov 2024
    5.3
    Medium

    CVE-2024-38748

    Last Modified: 4 Apr 2025

    Access Control vulnerability in TheInnovs EleForms allows . This issue affects EleForms: from n/a through 2.9.9.9.

    Published: 1 Nov 2024
    5.3
    Medium

    CVE-2024-38769

    Last Modified: 20 Mar 2025

    Missing Authorization vulnerability in Tyche Softwares Arconix Shortcodes allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Arconix Shortcodes: from n/a through 2.1.11.

    Published: 1 Nov 2024
    6.5
    Medium

    CVE-2024-38771

    Last Modified: 23 Apr 2026

    Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration.This issue affects Atarim: from n/a through <= 4.0.

    Published: 1 Nov 2024
    5.4
    Medium

    CVE-2024-38774

    Last Modified: 15 Apr 2026

    Missing Authorization vulnerability in SiteGround SiteGround Security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteGround Security: from n/a through 1.5.0.

    Published: 1 Nov 2024
    6.5
    Medium

    CVE-2024-38777

    Last Modified: 15 Apr 2026

    Missing Authorization vulnerability in CreativeMotion Titan Anti-spam & Security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Titan Anti-spam & Security: from n/a through 7.3.6.

    Published: 1 Nov 2024
    5.3
    Medium

    CVE-2024-38783

    Last Modified: 20 Mar 2025

    Missing Authorization vulnerability in Tyche Softwares Arconix FAQ allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Arconix FAQ: from n/a through 1.9.4.

    Published: 1 Nov 2024
    5.3
    Medium

    CVE-2024-38792

    Last Modified: 15 Apr 2026

    Missing Authorization vulnerability in ConveyThis Translate Team Language Translate Widget for WordPress – ConveyThis allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Language Translate Widget for WordPress – ConveyThis: from n/a through 234.

    Published: 1 Nov 2024
    5.3
    Medium

    CVE-2024-38794

    Last Modified: 15 Apr 2026

    Missing Authorization vulnerability in MediaRon LLC Custom Query Blocks allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Custom Query Blocks: from n/a through 5.2.0.

    Published: 1 Nov 2024
    5.3
    Medium

    CVE-2024-39625

    Last Modified: 15 Apr 2026

    Missing Authorization vulnerability in icegram Icegram allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Icegram: from n/a through 3.1.24.

    Published: 1 Nov 2024
    5.4
    Medium

    CVE-2024-39635

    Last Modified: 28 May 2025

    Missing Authorization vulnerability in KaineLabs Youzify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Youzify: from n/a through 1.2.6.

    Published: 1 Nov 2024
    4.3
    Medium

    CVE-2024-39639

    Last Modified: 11 Apr 2025

    Broken Access Control vulnerability in Nickolas Bossinas WordPress File Upload allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress File Upload: from n/a through 4.24.7.

    Published: 1 Nov 2024
    6.5
    Medium

    CVE-2024-39640

    Last Modified: 15 Apr 2026

    Missing Authorization vulnerability in QuadLayers WP Social Feed Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Social Feed Gallery: from n/a through 4.3.9.

    Published: 1 Nov 2024