167249 matches found
PT-2026-49356
Unauthenticated Broken Access Control in User Registration = 5.1.2 versions...
PT-2026-49396
Unauthenticated Broken Access Control in Masteriyo - LMS = 2.1.5 versions...
PT-2026-49457
Unauthenticated Broken Access Control in Salon booking system = 10.30.25 versions...
PT-2026-49322
Name of the Vulnerable Software and Affected Versions impworks Bonsai version 6.0 Description Incorrect access control allows authenticated attackers with Editor privileges to escalate their privileges to Administrator. This can lead to unauthorized changes to accounts, passwords, and system...
PT-2026-49365
Unauthenticated Broken Access Control in Event Tickets Manager for WooCommerce = 1.5.3 versions...
PT-2026-49408
Unauthenticated Broken Access Control in Redsys for WooCommerce Light = 7.0.0 versions...
CVE-2026-50875
CVE-2026-50875 affects Deck9 Input v2.0.1: the /{form}/webhooks/{webhook} endpoint has incorrect access control, enabling authenticated attackers to modify or delete another tenant’s webhook via a crafted request. CVSS 3.1 base score 8.1 (HIGH): Network, Low attack complexity, Privileges required...
PT-2026-49432
Subscriber Broken Access Control in Amelia = 2.2 versions...
PT-2026-49327
Name of the Vulnerable Software and Affected Versions Project Firefly III version 6.5.9 Description Incorrect access control in the webhook management component allows attackers to scan internal resources by sending a crafted POST request. Recommendations At the moment, there is no information...
PT-2026-49325
Name of the Vulnerable Software and Affected Versions statping-ng version 0.93.0 Description Incorrect access control allows attackers to escalate privileges to Administrator and access sensitive components. Recommendations At the moment, there is no information about a newer version that contain...
VulnCheck KEV: CVE-2026-48969
Subscriber Broken Access Control in Really Simple SSL = 9.5.9 versions...
PT-2026-49473
Unauthenticated Broken Access Control in Contact Form by WPForms = 1.10.0.4 versions...
PT-2026-49430
Subscriber Broken Access Control in Groundhogg 4.4.1 versions...
PT-2026-49486
Unauthenticated Broken Access Control in TrueBooker = 1.1.9 versions...
PT-2026-49412
Unauthenticated Broken Access Control in wpForo Forum 3.0.2 versions...
PT-2026-49364
Name of the Vulnerable Software and Affected Versions Rank Math SEO versions prior to 1.0.272 Description Broken access control allows users with the Subscriber role to perform unauthorized actions within the plugin. Recommendations Update to version 1.0.272 or later...
PT-2026-49431
Subscriber Broken Access Control in myCred = 3.0.3 versions...
PT-2026-49326
Name of the Vulnerable Software and Affected Versions Sismics Docs Teedy version 1.11 Description Incorrect access control in the share-based read endpoints allows unauthorized attackers to access sensitive endpoints by sending a crafted request. Recommendations At the moment, there is no...