190359 matches found
CVE-2026-95587
The WordPress Hostinger Migrator plugin (version
EUVD-2026-89845
Subscriber Broken Access Control in FormGent = 1.12.2 versions...
CVE-2026-94499
The FormGent WordPress plugin (versions ≤ 1.12.2 ) contains a Broken Access Control vulnerability affecting Subscriber accounts. The provided documents do not specify the exact technical root cause, specific files, or remediation steps. No exploits or in-the-wild exploitation details are provided.
CVE-2026-94499 WordPress FormGent plugin <= 1.12.2 - Broken Access Control vulnerability
Subscriber Broken Access Control in FormGent = 1.12.2 versions...
CVE-2026-94499 WordPress FormGent plugin <= 1.12.2 - Broken Access Control vulnerability
Subscriber Broken Access Control in FormGent = 1.12.2 versions...
CVE-2026-94120 WordPress GravityExport Lite for Gravity Forms plugin <= 2.7.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms = 2.7.2 versions...
EUVD-2026-89837
Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms = 2.7.2 versions...
CVE-2026-94120 WordPress GravityExport Lite for Gravity Forms plugin <= 2.7.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms = 2.7.2 versions...
CVE-2026-94120
The GravityExport Lite for Gravity Forms plugin for WordPress (versions
CVE-2026-94074 WordPress Simply Schedule Appointments plugin <= 1.6.12.29 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Simply Schedule Appointments = 1.6.12.29 versions...
CVE-2026-94074
The Simply Schedule Appointments WordPress plugin, in versions
CVE-2026-94074 WordPress Simply Schedule Appointments plugin <= 1.6.12.29 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Simply Schedule Appointments = 1.6.12.29 versions...
EUVD-2026-89830
Unauthenticated Broken Access Control in Simply Schedule Appointments = 1.6.12.29 versions...
WordPress The Events Calendar plugin <= 6.17.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Erik Debye in WordPress Plugin The Events Calendar versions = 6.17.5...
Security Bulletin: Vulnerabilities exists in IBM Netezza Software
Summary Vulnerabilities identified in IBM Netezza Software have been addressed in version 11.3.1.3. Vulnerability Details CVEID:CVE-2026-39836 DESCRIPTION: The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL 0. CWE:CWE-476: NULL Pointer Dereference CVSS...
CVE-2026-102582
A flaw was found in Moodle. The manual enrolment management page did not properly check whether the manual enrolment plugin was disabled, allowing users with enrolment permissions to access the page directly by navigating to its URL. Consequently, an authorized user could manage manual enrolments...
EUVD-2026-89721
A flaw was found in Moodle. The manual enrolment management page did not properly check whether the manual enrolment plugin was disabled, allowing users with enrolment permissions to access the page directly by navigating to its URL. Consequently, an authorized user could manage manual enrolments...
WordPress Prevent files / folders access plugin <= 2.6.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by gueco in WordPress Plugin Prevent files / folders access versions = 2.6.7...
CVE-2026-102582
A flaw was found in Moodle. The manual enrolment management page did not properly check whether the manual enrolment plugin was disabled, allowing users with enrolment permissions to access the page directly by navigating to its URL. Consequently, an authorized user could manage manual enrolments...
CVE-2026-81842
A flaw was found in Grafana. The application fails to verify creation permissions on destination folders during panel update operations. An authenticated user with edit permissions in one folder can exploit this vulnerability through the library elements API to move a library panel into a folder...