BrokenAC ignore

20242025

Critical

High

Medium

Low

Global Rank

#515

of 3,238 researchers

Vulns

8

Critical0

High0

Medium8

Low0

Affected Assets

8

8plugins

Avg CVSS

4.8

Average score of vulnerabilities

Researcher Submissions

8 records


2025-01-21 00:00	WPBot Pro Wordpress Chatbot <= 13.5.5 - Missing Authorization to Authenticated (Subscriber+) Simple Text Response Creation WPBot Pro Wordpress Chatbot <= 13.5.5	`CVE-2024-12879`	4.3 Medium	BrokenAC ignore	Yes
2025-01-20 00:00	Visual Website Collaboration, Feedback & Project Management – Atarim <= 4.0.9 - Missing Authorization to Authenticated (Subscriber+) Project Page/File Deletion Atarim <= 4.0.9	`CVE-2024-12104`	5.3 Medium	Tieu Pham Trong Nhan	Yes
2025-01-06 19:18	Export Import Menus <= 1.9.1 - Missing Authorization to Unauthenticated Menu Export Export Import Menus <= 1.9.1	`CVE-2024-10866`	5.3 Medium	BrokenAC ignore	Yes
2025-01-06 16:28	Social Rocket – Social Sharing Plugin <= 1.3.4 - Missing Authorization to Settings Update Social Rocket <= 1.3.4	`CVE-2024-9697`	5.3 Medium	Tieu Pham Trong Nhan	Yes
2024-12-05 19:43	Gold Addons for Elementor <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) License Activation/Deactivation Gold Addons for Elementor <= 1.3.2	`CVE-2024-12110`	4.3 Medium	BrokenAC ignore	No
2024-12-03 00:00	Knowledge Base documentation & wiki plugin – BasePress Docs <= 2.16.3.3 - Missing Authorization to Authenticated (Subscriber+) Database Update Knowledge Base documentation & wiki plu… <= 2.16.3.3	`CVE-2024-10664`	4.3 Medium	BrokenAC ignore	Yes
2024-11-22 15:18	WP User Manager – User Profile Builder & Membership <= 2.9.11 - Missing Authorization to Carbon Fields Custom Sidebar Addition/Removal WP User Manager <= 2.9.11	`CVE-2024-10216`	4.3 Medium	BrokenAC ignore	Yes
2024-11-19 21:04	Yaad Sarig Payment Gateway For WC <= 2.2.4 - Missing Authorization to Authenticated (Subscriber+) Log Read/Deletion Yaad Sarig Payment Gateway For WC <= 2.2.4	`CVE-2024-10665`	5.4 Medium	BrokenAC ignore	Yes

Showing 1–8 of 8 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C