191006 matches found
CVE-2026-94679
The Fluent Support WordPress plugin, version 2.3.2 and below , is affected by a Broken Access Control vulnerability. This flaw allows for unauthorized actions within the subscriber context. No specific technical root cause, practical consequences, or remediation steps are provided in the availabl...
CVE-2026-94498 WordPress AppMySite plugin <= 3.15.4 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in AppMySite = 3.15.4 versions...
CVE-2026-94498
The AppMySite WordPress plugin (versions
EUVD-2026-85481
Unauthenticated Broken Access Control in AppMySite = 3.15.4 versions...
CVE-2026-94498 WordPress AppMySite plugin <= 3.15.4 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in AppMySite = 3.15.4 versions...
CVE-2026-94080 WordPress MarketKing plugin <= 2.1.70 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in MarketKing = 2.1.70 versions...
CVE-2026-94080 WordPress MarketKing plugin <= 2.1.70 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in MarketKing = 2.1.70 versions...
EUVD-2026-85470
Unauthenticated Broken Access Control in MarketKing = 2.1.70 versions...
CVE-2026-94080
Versions of the MarketKing WordPress plugin up to and including 2.1.70 are susceptible to an unauthenticated broken access control vulnerability. The vulnerability allows an attacker to perform actions without proper authorization. No specific root cause, practical impact details, or remediation ...
CVE-2026-94079 WordPress WP User Manager plugin <= 2.9.19 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP User Manager = 2.9.19 versions...
EUVD-2026-85469
Unauthenticated Broken Access Control in WP User Manager = 2.9.19 versions...
CVE-2026-94079
The WP User Manager plugin for WordPress, affecting versions
CVE-2026-94079 WordPress WP User Manager plugin <= 2.9.19 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP User Manager = 2.9.19 versions...
EUVD-2026-85463
Unauthenticated Broken Access Control in PayPlus Payment Gateway = 8.2.5 versions...
CVE-2026-93620 WordPress PayPlus Payment Gateway plugin <= 8.2.5 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in PayPlus Payment Gateway = 8.2.5 versions...
CVE-2026-93620 WordPress PayPlus Payment Gateway plugin <= 8.2.5 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in PayPlus Payment Gateway = 8.2.5 versions...
CVE-2026-93620
The PayPlus Payment Gateway WordPress plugin, in versions
CVE-2026-93529 WordPress WSP MCP - AI Agents Connector plugin <= 2.7.0 - Broken Access Control vulnerability
Contributor Broken Access Control in WSP MCP AI Agents Connector = 2.7.0 versions...
CVE-2026-93529
The WSP MCP – AI Agents Connector plugin for WordPress versions ≤ 2.7.0 is affected by a Broken Access Control vulnerability. The vulnerability specifically affects contributors , which may allow for unauthorized actions or data modification due to improper permission enforcement. No specific roo...