165199 matches found
CVE-2026-57367
CVE-2026-57367 affects the WordPress plugin WP Booking System, specifically versions prior to 5.12.8.1. The vulnerability is a Broken Access Control issue impacting the plugin’s ability to enforce access permissions, with exposed integrity risk (High) and limited availability impact as per Patchs...
EUVD-2026-48161
Subscriber Broken Access Control in Participants Database = 2.7.8.4 versions...
CVE-2026-27422
The CVE-2026-27422 entry concerns the WordPress YT Player plugin (versions
EUVD-2026-48160
Unauthenticated Broken Access Control in YT Player = 2.0.9 versions...
CVE-2026-27418
The CVE-2026-27418 entry concerns the WordPress plugin WP Fast Total Search
EUVD-2026-48159
Unauthenticated Broken Access Control in WP Fast Total Search = 1.81.282 versions...
CVE-2026-27399
CVE-2026-27399 concerns the WordPress MarketKing plugin, versions ≤ 2.1.40. The connected documents describe an Unauthenticated Broken Access Control vulnerability in MarketKing, meaning an unauthenticated attacker can bypass access controls. The exact impact details (which data or actions are ex...
EUVD-2026-48157
Unauthenticated Broken Access Control in MarketKing = 2.1.40 versions...
EUVD-2026-48155
Subscriber Broken Access Control in uListing = 2.2.0 versions...
EUVD-2026-48156
Contributor Broken Access Control in uListing = 2.2.0 versions...
CVE-2026-27391
Technical details about CVE-2026-27391 are not publicly available in the provided documents. Monitoring for updates is advised.
CVE-2026-27392
CVE-2026-27392 affects the WordPress uListing plugin
CVE-2026-27377
CVE-2026-27377 affects the WordPress plugin QuickCal – Appointment Booking Calendar for WordPress (versions
EUVD-2026-48154
Booking Agent Broken Access Control in QuickCal - Appointment Booking Calendar for WordPress = 1.0.16 versions...
EUVD-2026-48152
Unauthenticated Broken Access Control in Ditty = 3.1.66 versions...
CVE-2026-27355
CVE-2026-27355 affects WordPress Ditty plugin versions
EUVD-2026-48150
Unauthenticated Broken Access Control in WP Go Maps = 10.1.04 versions...
CVE-2026-25427
CVE-2026-25427 affects the WordPress plugin eRoom (versions ≤ 1.7.1). The description identifies a Broken Access Control issue for subscribers, but the available documents do not provide technical details, affected files, root cause, exploitability, or remediation steps. No exploitation informati...