CVE-2025-32209 - Totalprocessing WooCommerce Path Traversal Vulnerability
CVE ID : CVE-2025-32209
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in totalprocessing Total processing card payments for WooCommerce allows Path Traversal. This issue affects Total processing card payments for WooCommerce: from n/a through 7.1.5.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32209
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in totalprocessing Total processing card payments for WooCommerce allows Path Traversal. This issue affects Total processing card payments for WooCommerce: from n/a through 7.1.5.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32210 - CreativeMindsSolutions CM Registration and Invitation Codes Missing Authorization Vulnerability
CVE ID : CVE-2025-32210
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Missing Authorization vulnerability in CreativeMindsSolutions CM Registration and Invitation Codes allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects CM Registration and Invitation Codes: from n/a through 2.5.2.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32210
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Missing Authorization vulnerability in CreativeMindsSolutions CM Registration and Invitation Codes allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects CM Registration and Invitation Codes: from n/a through 2.5.2.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32212 - Specia Companion Missing Authorization Vulnerability
CVE ID : CVE-2025-32212
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Missing Authorization vulnerability in Specia Theme Specia Companion allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Specia Companion: from n/a through 4.6.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32212
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Missing Authorization vulnerability in Specia Theme Specia Companion allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Specia Companion: from n/a through 4.6.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32213 - Flothemesplugins Flo Forms Missing Authorization
CVE ID : CVE-2025-32213
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Missing Authorization vulnerability in flothemesplugins Flo Forms allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Flo Forms: from n/a through 1.0.43.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32213
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Missing Authorization vulnerability in flothemesplugins Flo Forms allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Flo Forms: from n/a through 1.0.43.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32214 - Hive Support Cross-Site Scripting
CVE ID : CVE-2025-32214
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hive Support Hive Support allows Stored XSS. This issue affects Hive Support: from n/a through 1.2.2.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32214
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hive Support Hive Support allows Stored XSS. This issue affects Hive Support: from n/a through 1.2.2.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32215 - Ability, Inc Accessibility Suite Unrestricted File Upload Stored XSS Vulnerability
CVE ID : CVE-2025-32215
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Unrestricted Upload of File with Dangerous Type vulnerability in Ability, Inc Accessibility Suite by Online ADA allows Stored XSS. This issue affects Accessibility Suite by Online ADA: from n/a through 4.18.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32215
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Unrestricted Upload of File with Dangerous Type vulnerability in Ability, Inc Accessibility Suite by Online ADA allows Stored XSS. This issue affects Accessibility Suite by Online ADA: from n/a through 4.18.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32216 - Spider Elements – Addons for Elementor Missing Authorization Vulnerability
CVE ID : CVE-2025-32216
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Missing Authorization vulnerability in Spider Themes Spider Elements – Addons for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Spider Elements – Addons for Elementor: from n/a through 1.6.2.
Severity: 6.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32216
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Missing Authorization vulnerability in Spider Themes Spider Elements – Addons for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Spider Elements – Addons for Elementor: from n/a through 1.6.2.
Severity: 6.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32221 - Spider Themes EazyDocs Missing Authorization Vulnerability
CVE ID : CVE-2025-32221
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Missing Authorization vulnerability in Spider Themes EazyDocs allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects EazyDocs: from n/a through 2.6.4.
Severity: 5.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32221
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Missing Authorization vulnerability in Spider Themes EazyDocs allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects EazyDocs: from n/a through 2.6.4.
Severity: 5.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32227 - Asgaros Forum Authentication Bypass
CVE ID : CVE-2025-32227
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Authentication Bypass by Spoofing vulnerability in Asgaros Asgaros Forum allows Identity Spoofing. This issue affects Asgaros Forum: from n/a through 3.0.0.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32227
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Authentication Bypass by Spoofing vulnerability in Asgaros Asgaros Forum allows Identity Spoofing. This issue affects Asgaros Forum: from n/a through 3.0.0.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32228 - WP Messiah Ai Image Alt Text Generator for WP Sensitive Information Exposure
CVE ID : CVE-2025-32228
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WP Messiah Ai Image Alt Text Generator for WP. This issue affects Ai Image Alt Text Generator for WP: from n/a through 1.0.8.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32228
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WP Messiah Ai Image Alt Text Generator for WP. This issue affects Ai Image Alt Text Generator for WP: from n/a through 1.0.8.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32230 - Themeum Tutor LMS XSS
CVE ID : CVE-2025-32230
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Themeum Tutor LMS. This issue affects Tutor LMS: from n/a through 3.4.0.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32230
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Themeum Tutor LMS. This issue affects Tutor LMS: from n/a through 3.4.0.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32236 - Vagonic Woocommerce Products Reorder Drag Drop Multiple Sort – Sortable, Rearrange Products Missing Authorization Vulnerability
CVE ID : CVE-2025-32236
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Missing Authorization vulnerability in Vagonic Woocommerce Products Reorder Drag Drop Multiple Sort – Sortable, Rearrange Products Vagonic. This issue affects Woocommerce Products Reorder Drag Drop Multiple Sort – Sortable, Rearrange Products Vagonic: from n/a through 1.9.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32236
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Missing Authorization vulnerability in Vagonic Woocommerce Products Reorder Drag Drop Multiple Sort – Sortable, Rearrange Products Vagonic. This issue affects Woocommerce Products Reorder Drag Drop Multiple Sort – Sortable, Rearrange Products Vagonic: from n/a through 1.9.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32240 - Site Notify Missing Authorization Vulnerability
CVE ID : CVE-2025-32240
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Missing Authorization vulnerability in NotFound Site Notify allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Site Notify: from n/a through 1.0.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32240
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Missing Authorization vulnerability in NotFound Site Notify allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Site Notify: from n/a through 1.0.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32242 - Hive Support Missing Authorization Vulnerability
CVE ID : CVE-2025-32242
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Missing Authorization vulnerability in Hive Support Hive Support allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Hive Support: from n/a through 1.2.2.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32242
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Missing Authorization vulnerability in Hive Support Hive Support allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Hive Support: from n/a through 1.2.2.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32243 - Toast Plugins Internal Link Optimiser Missing Authorization Vulnerability
CVE ID : CVE-2025-32243
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Missing Authorization vulnerability in Toast Plugins Internal Link Optimiser allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Internal Link Optimiser: from n/a through 5.1.2.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32243
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Missing Authorization vulnerability in Toast Plugins Internal Link Optimiser allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Internal Link Optimiser: from n/a through 5.1.2.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32244 - QuantumCloud SEO Help Missing Authorization Vulnerability
CVE ID : CVE-2025-32244
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Missing Authorization vulnerability in QuantumCloud SEO Help allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects SEO Help: from n/a through 6.6.1.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32244
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Missing Authorization vulnerability in QuantumCloud SEO Help allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects SEO Help: from n/a through 6.6.1.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32259 - Alimir WP ULike Missing Authorization Vulnerability
CVE ID : CVE-2025-32259
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Missing Authorization vulnerability in Alimir WP ULike. This issue affects WP ULike: from n/a through 4.7.9.1.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32259
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Missing Authorization vulnerability in Alimir WP ULike. This issue affects WP ULike: from n/a through 4.7.9.1.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32260 - Detheme DethemeKit For Elementor Missing Authorization Vulnerability
CVE ID : CVE-2025-32260
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Missing Authorization vulnerability in Detheme DethemeKit For Elementor. This issue affects DethemeKit For Elementor: from n/a through 2.1.10.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32260
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Missing Authorization vulnerability in Detheme DethemeKit For Elementor. This issue affects DethemeKit For Elementor: from n/a through 2.1.10.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32275 - Ays Pro Survey Maker Authentication Bypass
CVE ID : CVE-2025-32275
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Authentication Bypass by Spoofing vulnerability in Ays Pro Survey Maker allows Identity Spoofing. This issue affects Survey Maker: from n/a through 5.1.5.4.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32275
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Authentication Bypass by Spoofing vulnerability in Ays Pro Survey Maker allows Identity Spoofing. This issue affects Survey Maker: from n/a through 5.1.5.4.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32282 - ShareThis Dashboard for Google Analytics CSRF Vulnerability
CVE ID : CVE-2025-32282
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Cross-Site Request Forgery (CSRF) vulnerability in ShareThis ShareThis Dashboard for Google Analytics. This issue affects ShareThis Dashboard for Google Analytics: from n/a through 3.2.2.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32282
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Cross-Site Request Forgery (CSRF) vulnerability in ShareThis ShareThis Dashboard for Google Analytics. This issue affects ShareThis Dashboard for Google Analytics: from n/a through 3.2.2.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32668 - Rameez Iqbal Real Estate Manager PHP Remote File Inclusion Vulnerability
CVE ID : CVE-2025-32668
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Rameez Iqbal Real Estate Manager allows PHP Local File Inclusion. This issue affects Real Estate Manager: from n/a through 7.3.
Severity: 8.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32668
Published : April 10, 2025, 8:15 a.m. | 1 hour, 20 minutes ago
Description : Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Rameez Iqbal Real Estate Manager allows PHP Local File Inclusion. This issue affects Real Estate Manager: from n/a through 7.3.
Severity: 8.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...