CVE-2026-94080 WordPress MarketKing plugin <= 2.1.70 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in MarketKing = 2.1.70 versions...

EUVD-2026-85470

Unauthenticated Broken Access Control in MarketKing = 2.1.70 versions...

CVE-2026-94080

Versions of the MarketKing WordPress plugin up to and including 2.1.70 are susceptible to an unauthenticated broken access control vulnerability. The vulnerability allows an attacker to perform actions without proper authorization. No specific root cause, practical impact details, or remediation ...

CVE-2026-94079 WordPress WP User Manager plugin <= 2.9.19 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in WP User Manager = 2.9.19 versions...

EUVD-2026-85469

Unauthenticated Broken Access Control in WP User Manager = 2.9.19 versions...

CVE-2026-94079

The WP User Manager plugin for WordPress, affecting versions

CVE-2026-94079 WordPress WP User Manager plugin <= 2.9.19 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in WP User Manager = 2.9.19 versions...

CVE-2026-93620 WordPress PayPlus Payment Gateway plugin <= 8.2.5 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in PayPlus Payment Gateway = 8.2.5 versions...

CVE-2026-93620 WordPress PayPlus Payment Gateway plugin <= 8.2.5 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in PayPlus Payment Gateway = 8.2.5 versions...

CVE-2026-93620

The PayPlus Payment Gateway WordPress plugin, in versions

EUVD-2026-85463

Unauthenticated Broken Access Control in PayPlus Payment Gateway = 8.2.5 versions...

CVE-2026-93529 WordPress WSP MCP - AI Agents Connector plugin <= 2.7.0 - Broken Access Control vulnerability

Contributor Broken Access Control in WSP MCP AI Agents Connector = 2.7.0 versions...

CVE-2026-93529

The WSP MCP – AI Agents Connector plugin for WordPress versions ≤ 2.7.0 is affected by a Broken Access Control vulnerability. The vulnerability specifically affects contributors , which may allow for unauthorized actions or data modification due to improper permission enforcement. No specific roo...

CVE-2026-93529 WordPress WSP MCP - AI Agents Connector plugin <= 2.7.0 - Broken Access Control vulnerability

Contributor Broken Access Control in WSP MCP AI Agents Connector = 2.7.0 versions...

EUVD-2026-85461

Contributor Broken Access Control in WSP MCP AI Agents Connector = 2.7.0 versions...

DRUPAL-CONTRIB-2026-190

This module enables you to personalize content for anonymous and authenticated users by showing different blocks to visitors based on client-side conditions. The Smart Content Block submodule doesn't sufficiently check block access when it renders the blocks of a "Display Blocks" reaction through...

SUSE CVE-2026-93565

A flaw was found in Netty RtspDecoder. The RtspMethods.valueOf function incorrectly strips trailing control bytes from method tokens in Real-Time Streaming Protocol RTSP requests. A remote attacker can exploit this by sending a specially crafted RTSP request, leading to method-token smuggling. Th...

Security Bulletin: Multiple Vulnerabilities affect VM Manager Tool and Scans Relay as part of IBM License Metric Tool Software as a Service

Summary Multiple vulnerabilities have been addressed in components of VM Manager Tool and Scans Relay as part of IBM License Metric Tool Software as a Service Vulnerability Details CVEID:CVE-2026-61308 DESCRIPTION: Difficult to exploit vulnerability allows unauthenticated attacker with network...

CVE-2026-86679 Broken Access Control vulnerability

ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to delete service monitors outside their assigned scope...

CVE-2026-86679 Broken Access Control vulnerability

ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to delete service monitors outside their assigned scope...