Authentication Bypass by Primary Weakness

Overview pyload-ng is a The free and open-source Download Manager written in pure Python Affected versions of this package are vulnerable to Authentication Bypass by Primary Weakness via an API key cache keyed on keyid instead of the full API key value in checkapikey. Because the cache is indexed...

PT-2026-141135

Name of the Vulnerable Software and Affected Versions pyLoad versions prior to 0.5.0b3.dev101 Description An authentication bypass exists in the API-key cache mechanism. The Api.check apikey function caches successful validations in self. apikey cache using only the key id, which is a small...

CVE-2026-8616

The Fense Proxy & VPN Blocker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check and missing nonce validation on the fensebpvtsavesettings function in versions up to, and including, 3.0.1. The callback is registered to both wpajax and...

PT-2026-60705

Name of the Vulnerable Software and Affected Versions Fense Proxy & VPN Blocker versions prior to 3.0.2 Description Unauthorized modification of data is possible due to a missing capability check and missing nonce validation in the fense bpvt save settings function. The callback is registered to...