Access Control

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. WordPress CoDesigner plugin <= 4.29 - Broken Access Control vulnerabilityCVE-2025-57961Codexpert, Inc · CVSS 4.3 · 0.4% likely

   CWE-862

2. WordPress ThumbPress plugin < 6.5 - Broken Access Control vulnerabilityCVE-2026-32549Codexpert, Inc · CVSS 7.5 · 0.4% likely

   CWE-862

3. Duplica <= 0.6 - Authenticated (Subscriber+) Missing Authorization to Users/Posts Duplicates CreationCVE-2024-5997codexpert · CVSS 4.3 · 0.4% likely

   CWE-862

4. ThumbPress <= 6.2.1 - Missing Authorization to Authenticated (Subscriber+) Plugin DeactivationCVE-2026-7622codexpert · CVSS 4.3 · 0.4% likely

   CWE-862

5. WC Affiliate – A Complete WooCommerce Affiliate Plugin <= 2.5.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via wf-export-allCVE-2024-12336codexpert · CVSS 6.5 · 0.4% likely

   CWE-862

6. WordPress ThumbPress plugin <= 6.3.2 - Broken Access Control vulnerabilityCVE-2026-57720Codexpert Inc · CVSS 4.3 · 0.3% likely

   CWE-862

7. WordPress CF7 Submissions Plugin <= 0.26 - Broken Access Control VulnerabilityCVE-2025-58016Codexpert, Inc · CVSS 4.3 · 0.2% likely

   CWE-862

8. WordPress Restrict Elementor Widgets, Columns and Sections plugin <= 1.12 - Broken Access Control vulnerabilityCVE-2025-64244Codexpert, Inc · CVSS 4.3 · 0.2% likely

   CWE-862

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.