Access Control

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. Product Expiry for WooCommerce <= 2.5 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings UpdateCVE-2024-0201webcodingplace · CVSS 5.4 · 0.4% likely

   CWE-862

2. Real Estate Manager Pro <= 12.8.6 - Authenticated (Subscriber+) Privilege Escalation via 'user_has_cap' Filter ID CollisionCVE-2026-15142WebCodingPlace · CVSS 7.5 · 0.4% likely

   CWE-269

3. WordPress Responsive Posts Carousel Pro plugin <= 15.1 - Broken Access Control vulnerabilityCVE-2026-27361WebCodingPlace · CVSS 7.5 · 0.4% likely

   CWE-862

4. WordPress Product Expiry for WooCommerce plugin <= 2.5 - Broken Access Control vulnerabilityCVE-2023-52179WebCodingPlace · CVSS 5.4 · 0.3% likely

   CWE-862

5. WordPress Image Caption Hover Pro plugin < 20.0 - Broken Access Control vulnerabilityCVE-2025-67562WebCodingPlace · CVSS 5.4 · 0.3% likely

   CWE-862

6. Ultimate Classified Listings <= 1.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings UpdateCVE-2025-0763webcodingplace · CVSS 4.3 · 0.2% likely

   CWE-862

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.