Access Control

Every one of the 24 is a mark on the map. Named now: 1 to 24, most at risk first.

1. Multiple e-plugins - Subscriber+ Privilege EscalationCVE-2020-36666E-Plugins · CVSS 8.8 · 0.9% likely

   CWE-269

2. WordPress Lawyer Directory plugin <= 1.3.3 - Privilege Escalation vulnerabilityCVE-2025-67966e-plugins · CVSS 8.8 · 0.5% likely

   CWE-266

3. WordPress Hospital Doctor Directory plugin <= 1.3.9 - Privilege Escalation vulnerabilityCVE-2025-69183e-plugins · CVSS 8.8 · 0.4% likely

   CWE-266

4. WordPress Institutions Directory plugin <= 1.3.4 - Privilege Escalation vulnerabilityCVE-2025-69182e-plugins · CVSS 8.8 · 0.4% likely

   CWE-266

5. WordPress Hotel Listing plugin <= 1.4.0 - Privilege Escalation vulnerabilityCVE-2025-58710e-plugins · CVSS 8.8 · 0.4% likely

   CWE-266

6. WordPress Hotel Listing plugin <= 1.4.2 - Broken Access Control vulnerabilityCVE-2025-68059e-plugins · CVSS 7.6 · 0.4% likely

   CWE-862

7. WordPress Hospital Doctor Directory plugin <= 1.3.9 - Broken Access Control vulnerabilityCVE-2025-68057e-plugins · CVSS 7.6 · 0.4% likely

   CWE-862

8. WordPress Lawyer Directory plugin <= 1.3.3 - Broken Access Control vulnerabilityCVE-2025-67967e-plugins · CVSS 7.6 · 0.4% likely

   CWE-862

9. WordPress Lawyer Directory plugin <= 1.3.4 - Broken Access Control vulnerabilityCVE-2025-69181e-plugins · CVSS 7.3 · 0.3% likely

   CWE-862

10. WordPress Final User plugin <= 1.2.5 - Privilege Escalation vulnerabilityCVE-2025-69293e-plugins · CVSS 8.8 · 0.3% likely

    CWE-266

11. WordPress WP Membership plugin <= 1.6.4 - Privilege Escalation vulnerabilityCVE-2025-69292e-plugins · CVSS 8.8 · 0.3% likely

    CWE-266

12. WordPress Institutions Directory plugin <= 1.3..4 - Broken Access Control vulnerabilityCVE-2025-68058e-plugins · CVSS 7.6 · 0.3% likely

    CWE-862

13. WordPress WP Membership plugin <= 1.6.4 - Broken Access Control vulnerabilityCVE-2025-69193e-plugins · CVSS 7.3 · 0.3% likely

    CWE-862

14. WordPress Real Estate Pro plugin <= 2.1.5 - Broken Access Control vulnerabilityCVE-2025-69192e-plugins · CVSS 7.3 · 0.3% likely

    CWE-862

15. WordPress ListingHub plugin <= 1.2.7 - Broken Access Control vulnerabilityCVE-2025-69191e-plugins · CVSS 7.3 · 0.3% likely

    CWE-862

16. WordPress Listihub theme <= 1.0.6 - Broken Access Control vulnerabilityCVE-2025-69190e-plugins · CVSS 7.3 · 0.3% likely

    CWE-862

17. WordPress fitness-trainer plugin <= 1.7.1 - Broken Access Control vulnerabilityCVE-2025-69188e-plugins · CVSS 7.3 · 0.3% likely

    CWE-862

18. WordPress Final User plugin <= 1.2.5 - Broken Access Control vulnerabilityCVE-2025-69187e-plugins · CVSS 7.3 · 0.3% likely

    CWE-862

19. WordPress Hospital Doctor Directory plugin <= 1.3.9 - Broken Access Control vulnerabilityCVE-2025-69186e-plugins · CVSS 7.3 · 0.3% likely

    CWE-862

20. WordPress Hotel Listing plugin <= 1.4.2 - Broken Access Control vulnerabilityCVE-2025-69185e-plugins · CVSS 7.3 · 0.3% likely

    CWE-862

21. WordPress Institutions Directory plugin <= 1.3.4 - Broken Access Control vulnerabilityCVE-2025-69184e-plugins · CVSS 7.3 · 0.3% likely

    CWE-862

22. WordPress Directory Pro plugin <= 2.5.6 - Broken Access Control vulnerabilityCVE-2026-27396e-plugins · CVSS 7.3 · 0.3% likely

    CWE-862

23. WordPress WP Membership Plugin <= 1.6.3 - Settings Change VulnerabilityCVE-2025-54717e-plugins · CVSS 5.4 · 0.2% likely

    CWE-862

24. WordPress Directory Pro plugin <= 2.5.6 - Broken Access Control vulnerabilityCVE-2025-64243e-plugins · CVSS 4.3 · 0.2% likely

    CWE-862

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.