EUVD-2026-94958

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to bypass security restrictions due to improper authorization...

CVE-2026-105893 WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Manipulating User-Controlled Variables.This issue affects Event Tickets: from n/a through 5.30.0.1...

CVE-2026-105893

The Liquid Web / StellarWP Event Tickets plugin (version 5.30.0.1 and earlier) is vulnerable to an Authorization Bypass caused by a User-Controlled Key vulnerability. This flaw allows for the manipulation of User-Controlled Variables , potentially leading to unauthorized access. The CVSS 3.1 scor...

EUVD-2026-94954

Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Manipulating User-Controlled Variables.This issue affects Event Tickets: from n/a through 5.30.0.1...

CVE-2026-105891

The Liquid Web / StellarWP Event Tickets plugin (event-tickets) is affected by a Missing Authorization vulnerability in versions up to and including 5.30.0.1 . This issue allows for the exploitation of incorrectly configured access control security levels , potentially leading to unauthorized act...

EUVD-2026-94951

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...

EUVD-2026-94950

Missing Authorization vulnerability in VillaTheme VillaTheme Core villatheme-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VillaTheme Core: from n/a through 1.0.5...

CVE-2026-105888 WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...

EUVD-2026-94948

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...

CVE-2024-10542

PoC de CVE-2024-10542 y CVE-2024-10781: Autenticación rota en el plugin Spam protection, AntiSpam, FireWall by CleanTalk = 6.43.2 Descargo de responsabilidad: La información proporcionada en este documento sobre CVE-2024-10542 tiene fines exclusivamente educativos y de aprendizaje. No alentamos n...

CVE-2026-105886

The BdThemes Ultimate Post Kit WordPress plugin (versions up to and including 4.5.5 ) is vulnerable to a Missing Authorization vulnerability (CWE-862). This flaw allows for the exploitation of incorrectly configured access control security levels . The vulnerability results in a medium severity r...

EUVD-2026-94943

Missing Authorization vulnerability in BdThemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Post Kit: from n/a through 4.5.5...

CVE-2025-31161

Escáner de omisión de autenticación CVE-2025-31161 CrushFTP Una herramienta en Python para detectar y probar la vulnerabilidad CVE-2025-31161 en servidores CrushFTP. 📖 Descripción Este script prueba la vulnerabilidad de omisión de autenticación CVE-2025-31161 en servidores CrushFTP que permite a...

cve-2025-29927-demo

cve-2025-29927-demo Demo que reproduce la vulnerabilidad de bypass de autorización en Next.js. Para más detalles sobre esta vulnerabilidad, consulte Resumen de la vulnerabilidad CVE-2025-29927 de Next.js . Método para reproducir la vulnerabilidad 1. Clone este repositorio. git clone...

POC-2020-8559

POC-2020-8559 Exploit para CVE-2020-8559. Robamos todas las conexiones al kubelet usando iptables y luego reescribimos las respuestas 101 o 302 a 307. Los 101 son para versiones modernas de Kubernetes, los 302 para las más antiguas. No tenemos acceso al certificado x509 del kube-apiserver, por lo...

CVE-2026-105878

The YITH WooCommerce Product Bundles WordPress plugin (versions

EUVD-2026-94931

Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Product Bundles: from n/a through 2.29.0...

CVE-2026-106603 WordPress HollerBox plugin <= 2.3.14 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Groundhogg HollerBox holler-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HollerBox: from n/a through 2.3.14...

CVE-2026-106603 WordPress HollerBox plugin <= 2.3.14 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Groundhogg HollerBox holler-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HollerBox: from n/a through 2.3.14...

EUVD-2026-94930

Authorization Bypass Through User-Controlled Key vulnerability in Groundhogg HollerBox holler-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HollerBox: from n/a through 2.3.14...