CVE-2026-97281 WordPress WP Project Manager plugin <= 4.0.7 - Broken Access Control vulnerability

Subscriber Broken Access Control in WP Project Manager = 4.0.7 versions...

CVE-2026-97281 WordPress WP Project Manager plugin <= 4.0.7 - Broken Access Control vulnerability

Subscriber Broken Access Control in WP Project Manager = 4.0.7 versions...

CVE-2026-97281

The WP Project Manager plugin for WordPress (versions

EUVD-2026-90839

Subscriber Broken Access Control in WP Project Manager = 4.0.7 versions...

CVE-2026-97277 WordPress Social Boost plugin <= 3.6.2 - Broken Access Control vulnerability

Subscriber Broken Access Control in Social Boost = 3.6.2 versions...

CVE-2026-97277 WordPress Social Boost plugin <= 3.6.2 - Broken Access Control vulnerability

Subscriber Broken Access Control in Social Boost = 3.6.2 versions...

EUVD-2026-90838

Subscriber Broken Access Control in Social Boost = 3.6.2 versions...

CVE-2026-97277

The Social Boost WordPress plugin, versions 3.6.2 and below , is affected by a Broken Access Control vulnerability (CWE-862) involving subscriber privileges. This flaw allows for unauthorized actions due to insufficient access control checks. The vulnerability has a High severity rating with a CV...

CVE-2026-97258

The WordPress Aruba Migration Tool plugin (versions

CVE-2026-97258 WordPress Aruba Migration Tool plugin <= 1.0.4 - Broken Access Control vulnerability

Subscriber Broken Access Control in Aruba Migration Tool = 1.0.4 versions...

CVE-2026-97258 WordPress Aruba Migration Tool plugin <= 1.0.4 - Broken Access Control vulnerability

Subscriber Broken Access Control in Aruba Migration Tool = 1.0.4 versions...

EUVD-2026-90857

Subscriber Broken Access Control in Aruba Migration Tool = 1.0.4 versions...

CVE-2026-62073 WordPress WP Full Stripe Free plugin <= 8.5.6 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in WP Full Stripe Free = 8.5.6 versions...

CVE-2026-62073 WordPress WP Full Stripe Free plugin <= 8.5.6 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in WP Full Stripe Free = 8.5.6 versions...

EUVD-2026-90853

Unauthenticated Broken Access Control in WP Full Stripe Free = 8.5.6 versions...

CVE-2026-62073

The WP Full Stripe Free WordPress plugin (versions

CVE-2026-66246

iControl is affected by a Broken Access Control vulnerability, which could allow an attacker to exploit missing authentication checks or insecure direct object references IDOR, enabling privilege escalation and the unauthorized modification or deletion of sensitive application data...

WordPress WP Project Manager plugin <= 4.0.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nixxies in WordPress Plugin WP Project Manager versions = 4.0.7...

WordPress Social Boost plugin <= 3.6.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by SecondGateWP in WordPress Plugin Social Boost versions = 3.6.2...

WordPress Aruba Migration Tool plugin <= 1.0.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Aruba Migration Tool versions = 1.0.4...