167854 matches found
VulnCheck KEV: CVE-2026-48969
Subscriber Broken Access Control in Really Simple SSL = 9.5.9 versions...
PT-2026-49364
Name of the Vulnerable Software and Affected Versions Rank Math SEO versions prior to 1.0.272 Description Broken access control allows users with the Subscriber role to perform unauthorized actions within the plugin. Recommendations Update to version 1.0.272 or later...
PT-2026-49431
Subscriber Broken Access Control in myCred = 3.0.3 versions...
PT-2026-49326
Name of the Vulnerable Software and Affected Versions Sismics Docs Teedy version 1.11 Description Incorrect access control in the share-based read endpoints allows unauthorized attackers to access sensitive endpoints by sending a crafted request. Recommendations At the moment, there is no...
PT-2026-49473
Unauthenticated Broken Access Control in Contact Form by WPForms = 1.10.0.4 versions...
PT-2026-49430
Subscriber Broken Access Control in Groundhogg 4.4.1 versions...
PT-2026-49486
Unauthenticated Broken Access Control in TrueBooker = 1.1.9 versions...
PT-2026-49412
Unauthenticated Broken Access Control in wpForo Forum 3.0.2 versions...
PT-2026-49356
Unauthenticated Broken Access Control in User Registration = 5.1.2 versions...
PT-2026-49417
Subscriber Broken Access Control in rtMedia for WordPress, BuddyPress and bbPress = 4.7.9 versions...
PT-2026-49362
Unauthenticated Broken Access Control in Simple Membership = 4.7.1 versions...
PT-2026-49491
Name of the Vulnerable Software and Affected Versions JS Help Desk versions prior to 3.0.10 Description Broken Access Control allows unauthenticated users to bypass security restrictions. Recommendations Update to version 3.0.10 or later...
CVE-2026-50885
CVE-2026-50885 concerns Sismics Docs (Teedy) with version v1.11, where an incorrect access control flaw in the share-based read endpoints enables unauthorized attackers to access sensitive endpoints via a crafted request. The related advisories consistently describe limited information about root...
PT-2026-49393
Subscriber Broken Access Control in Motors 1.4.107 versions...
PT-2026-49402
Subscriber Broken Access Control in RepairBuddy = 4.1132 versions...
PT-2026-49419
Unauthenticated Broken Access Control in Royal MCP = 1.4.2 versions...
PT-2026-49409
Unauthenticated Broken Access Control in Tutor LMS = 3.9.7 versions...
CVE-2026-50886
Incorrect access control in the webhook management component of Project Firefly III v6.5.9 allows attackers to scan internal resources via a crafted POST request...