167590 matches found
PT-2026-49412
Unauthenticated Broken Access Control in wpForo Forum 3.0.2 versions...
PT-2026-49356
Unauthenticated Broken Access Control in User Registration = 5.1.2 versions...
PT-2026-49417
Subscriber Broken Access Control in rtMedia for WordPress, BuddyPress and bbPress = 4.7.9 versions...
PT-2026-49362
Unauthenticated Broken Access Control in Simple Membership = 4.7.1 versions...
PT-2026-49491
Name of the Vulnerable Software and Affected Versions JS Help Desk versions prior to 3.0.10 Description Broken Access Control allows unauthenticated users to bypass security restrictions. Recommendations Update to version 3.0.10 or later...
CVE-2026-50885
CVE-2026-50885 concerns Sismics Docs (Teedy) with version v1.11, where an incorrect access control flaw in the share-based read endpoints enables unauthorized attackers to access sensitive endpoints via a crafted request. The related advisories consistently describe limited information about root...
PT-2026-49393
Subscriber Broken Access Control in Motors 1.4.107 versions...
PT-2026-49402
Subscriber Broken Access Control in RepairBuddy = 4.1132 versions...
PT-2026-49419
Unauthenticated Broken Access Control in Royal MCP = 1.4.2 versions...
PT-2026-49426
Subscriber Broken Access Control in ChatBot = 7.9.7 versions...
PT-2026-49409
Unauthenticated Broken Access Control in Tutor LMS = 3.9.7 versions...
CVE-2026-50886
Incorrect access control in the webhook management component of Project Firefly III v6.5.9 allows attackers to scan internal resources via a crafted POST request...
PT-2026-49506
Unauthenticated Broken Access Control in Knit Pay = 9.4.0.0 versions...
PT-2026-49442
Unauthenticated Broken Access Control in Classified Listing = 5.3.8 versions...
CVE-2026-50875
Incorrect access control in the /form/webhooks/webhook endpoint of Deck9 Input v2.0.1 allows authenticated attackers to arbitrarily modify or delete another tenant's webhook via a crafted request...
PT-2026-49420
Unauthenticated Broken Access Control in WP Event SOlution = 4.1.8 versions...
PT-2026-49332
Name of the Vulnerable Software and Affected Versions Filestash version 0.4.0 Description Incorrect access control in the '/admin/api/config' endpoint allows attackers to escalate privileges by sending a crafted request. Recommendations At the moment, there is no information about a newer version...
PT-2026-49405
Subscriber Broken Access Control in Ultra Addons for WPForms = 1.0.11 versions...