Access Control

Every one of the 31 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Templately <= 3.1.2 - Broken Access ControlCVE-2024-47308WPDeveloper · CVSS 6.5 · 1.7% likely

   CWE-862

2. Simple 301 Redirects by BetterLinks <= 2.0.3 - Unauthenticated Arbitrary Redirect ImportCVE-2021-24353Wpdeveloper · 1.5% likely

   CWE-862

3. Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Arbitrary Plugin ActivationCVE-2021-24356Wpdeveloper · 2.6% likely

   CWE-862

4. Simple 301 Redirects by BetterLinks - 2.0.0-2.0.3 - Arbitrary Plugin InstallationCVE-2021-24354Wpdeveloper · 1.5% likely

   CWE-862

5. Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Unauthenticated Redirect ExportCVE-2021-24352Wpdeveloper · 1.2% likely

   CWE-862

6. WordPress Essential Addons for Elementor plugin <= 5.8.8 - Contributor+ Privilege Escalation vulnerabilityCVE-2023-41955WPDeveloper · CVSS 8.8 · 0.8% likely

   CWE-269

7. Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Update and Retrieve Wildcard ValueCVE-2021-24355Wpdeveloper · 0.7% likely

   CWE-862

8. Countdown Block < 1.1.2 - Missing Authorisation in AJAX actionCVE-2021-24633Wpdeveloper · 0.7% likely

   CWE-862

9. WordPress SchedulePress plugin <= 5.0.8 - Broken Access Control vulnerabilityCVE-2024-32717WPDeveloper · CVSS 6.5 · 0.6% likely

   CWE-862

10. WordPress Essential Blocks plugin <= 4.2.0 - Multiple Contributor+ Broken Access Control vulnerabilityCVE-2023-51359WPDeveloper · CVSS 5.4 · 0.6% likely

    CWE-862

11. WordPress Essential Blocks plugin <= 4.2.0 - Multiple Subscriber+ Broken Access Control vulnerabilityCVE-2023-51360WPDeveloper · CVSS 6.5 · 0.6% likely

    CWE-862

12. WordPress BetterLinks plugin <= 1.6.0 - Broken Access Control vulnerabilityCVE-2023-45104WPDeveloper · CVSS 7.3 · 0.5% likely

    CWE-862

13. WordPress Essential Blocks for Gutenberg plugin <= 3.8.5 - Broken Access ControlCVE-2022-47594WPDeveloper · CVSS 6.5 · 0.4% likely

    CWE-862

14. WordPress EmbedPress plugin <= 4.0.4 - Broken Access Control vulnerabilityCVE-2024-38707WPDeveloper · CVSS 6.3 · 0.4% likely

    CWE-862

15. WordPress Essential Blocks plugin <= 4.4.9 - Broken Access Control vulnerabilityCVE-2024-30467WPDeveloper · CVSS 6.5 · 0.4% likely

    CWE-862

16. WordPress Essential Blocks plugin <= 4.8.3 - Broken Access Control vulnerabilityCVE-2025-26871WPDeveloper · CVSS 4.3 · 0.4% likely

    CWE-862

17. WordPress Essential Blocks plugin <= 4.2.0 - Broken Access Control vulnerabilityCVE-2023-47760WPDeveloper · CVSS 4.3 · 0.4% likely

    CWE-862

18. WordPress EmbedPress plugin <= 3.9.8 - Broken Access Control vulnerabilityCVE-2024-31284WPDeveloper · CVSS 6.5 · 0.4% likely

    CWE-862

19. WordPress Templately plugin <= 3.1.5 - Broken Access Control vulnerabilityCVE-2024-50423WPDeveloper · CVSS 5.4 · 0.4% likely

    CWE-862

20. WordPress Templately plugin <= 3.1.5 - Broken Access Control vulnerabilityCVE-2024-50424WPDeveloper · CVSS 6.5 · 0.4% likely

    CWE-862

21. WordPress BetterDocs plugin <= 2.5.2 - Broken Access Control vulnerabilityCVE-2023-47762WPDeveloper · CVSS 4.3 · 0.3% likely

    CWE-862

22. WordPress Simple 301 Redirects by BetterLinks plugin <= 2.0.7 - Broken Access Control vulnerabilityCVE-2023-47761WPDeveloper · CVSS 4.3 · 0.3% likely

    CWE-862

23. WordPress EmbedPress plugin <= 3.9.11 - Broken Access Control vulnerabilityCVE-2024-31274WPDeveloper · CVSS 5.3 · 0.3% likely

    CWE-862

24. WordPress EmbedPress plugin <= 3.8.3 - Broken Access Control vulnerabilityCVE-2023-51375WPDeveloper · CVSS 4.3 · 0.3% likely

    CWE-862

25. WordPress Document Block – Upload & Embed Docs, PDF, PPT, XLS or Any Documents plugin <= 1.1.0 - Broken Access Control vulnerabilityCVE-2025-22696WPDeveloper · CVSS 5.4 · 0.3% likely

    CWE-862

26. SchedulePress before 5.3.5 Missing Authorization via wpsp_el_editor_form AJAX ActionCVE-2026-114120WPDeveloper · CVSS 5.4 · 0.3% likely

    CWE-862

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.