Access Control

Every one of the 18 is a mark on the map. Named now: 1 to 18, most at risk first.

1. Combo Blocks < 2.2.76 - Improper Access ControlCVE-2024-0881Pickplugins · CVSS 5.4 · 17% likely

   CWE-863

2. Post Grid and Gutenberg Blocks 2.2.87 - 2.2.90 - Authenticated (Subscriber+) Privilege EscalationCVE-2024-8253pickplugins · CVSS 8.8 · 9.4% likely

   CWE-266

3. Post Grid and Gutenberg Blocks 2.2.85 - 2.3.3 - Unauthenticated Privilege EscalationCVE-2024-9636pickplugins · CVSS 9.8 · 0.8% likely

   CWE-269

4. Product Designer <= 1.0.33 - Missing Authorization to Unauthenticated Arbitrary Attachment DeletionCVE-2024-3608pickplugins · CVSS 5.3 · 0.6% likely

   CWE-862

5. WordPress Job Board Manager plugin <= 2.1.61 - Broken Access Control vulnerabilityCVE-2024-55993PickPlugins · CVSS 5.3 · 0.6% likely

   CWE-862

6. Accordion <= 2.2.96 - Missing Authorization to Authenticated(Contributor+) Post DuplicationCVE-2024-1641pickplugins · CVSS 5.4 · 0.5% likely

   CWE-862

7. WordPress Product Designer plugin <= 1.0.33 - Arbitrary Content Deletion vulnerabilityCVE-2024-38726PickPlugins · CVSS 7.5 · 0.5% likely

   CWE-862

8. WordPress Question Answer plugin <= 1.2.73 - Broken Access Control vulnerabilityCVE-2025-31810PickPlugins · CVSS 5.3 · 0.5% likely

   CWE-862

9. Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins <= 2.0.58 - Sensitive Information ExposureCVE-2024-10937pickplugins · CVSS 5.3 · 0.4% likely

   CWE-284

10. WordPress Testimonial Slider plugin <= 2.0.15 - Broken Access Control vulnerabilityCVE-2025-68000PickPlugins · CVSS 6.5 · 0.4% likely

    CWE-862

11. WordPress Job Board Manager Plugin <= 2.1.61 - Broken Access Control vulnerabilityCVE-2025-31862PickPlugins · CVSS 5.3 · 0.3% likely

    CWE-862

12. WordPress Product Slider for WooCommerce plugin <= 1.13.61 - Broken Access Control vulnerabilityCVE-2026-25455PickPlugins · CVSS 6.5 · 0.3% likely

    CWE-862

13. WordPress Job Board Manager plugin <= 2.1.60 - Broken Access Control VulnerabilityCVE-2025-49324PickPlugins · CVSS 5.3 · 0.3% likely

    CWE-862

14. WordPress Testimonial Slider plugin <= 2.0.15 - Broken Access Control vulnerabilityCVE-2025-62929PickPlugins · CVSS 6.5 · 0.3% likely

    CWE-862

15. WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerabilityCVE-2025-62924PickPlugins · CVSS 6.5 · 0.3% likely

    CWE-862

16. WordPress Accordion Plugin <= 2.3.15 - Broken Access Control VulnerabilityCVE-2025-58678PickPlugins · CVSS 6.5 · 0.3% likely

    CWE-862

17. WordPress Accordion plugin <= 2.3.14 - Broken Access Control vulnerabilityCVE-2025-53421PickPlugins · CVSS 6.5 · 0.3% likely

    CWE-862

18. WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerabilityCVE-2025-66058PickPlugins · CVSS 6.5 · 0.2% likely

    CWE-862

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.