168359 matches found
CVE-2026-66455 WordPress ReactPress plugin <= 3.4.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in ReactPress = 3.4.0 versions...
CVE-2026-66455
Subscriber Broken Access Control in ReactPress = 3.4.0 versions...
EUVD-2026-57875
Subscriber Broken Access Control in ReactPress = 3.4.0 versions...
CVE-2026-66454 WordPress WP Social Avatar plugin <= 1.5 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Social Avatar = 1.5 versions...
EUVD-2026-57874
Unauthenticated Broken Access Control in WP Social Avatar = 1.5 versions...
CVE-2026-66454
Unauthenticated Broken Access Control in WP Social Avatar = 1.5 versions...
CVE-2026-66455
CVE-2026-66455 affects the WordPress ReactPress plugin up to version 3.4.0, described as a Subscriber Broken Access Control vulnerability. The NVD entry links a MEDIUM impact (CVSS 3.1: AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L) with network attack vector and low confidentiality, integrity, and availab...
CVE-2026-66454
CVE-2026-66454 affects the WordPress WP Social Avatar plugin (versions
CVE-2026-66441
CVE-2026-66441 affects WordPress MultiVendorX plugin versions up to 5.0.10, with unauthenticated broken access control. The available sources identify the affected product and the vulnerability class but do not provide a confirmed patch version or remediation steps. CVSS v3.1 base score 7.5 (HIGH...
EUVD-2026-57867
Unauthenticated Broken Access Control in MultiVendorX = 5.0.10 versions...
CVE-2026-66441 WordPress MultiVendorX plugin <= 5.0.10 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in MultiVendorX = 5.0.10 versions...
CVE-2026-66441
Unauthenticated Broken Access Control in MultiVendorX = 5.0.10 versions...
EUVD-2026-57864
Unauthenticated Broken Access Control in Bitcoin Lightning Payment Gateway for WooCommerce via CLINK = 1.0.7 versions...
CVE-2026-66431
CVE-2026-66431 concerns the WordPress plugin WordPress Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) with versions up to 1.0.7. The issue is Unauthenticated Broken Access Control, meaning an attacker can access restricted functionality without authentication. The description and c...
CVE-2026-66431
Unauthenticated Broken Access Control in Bitcoin Lightning Payment Gateway for WooCommerce via CLINK = 1.0.7 versions...
CVE-2026-66431 WordPress Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) plugin <= 1.0.7 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Bitcoin Lightning Payment Gateway for WooCommerce via CLINK = 1.0.7 versions...
CVE-2026-61984 WordPress WPMobile.App plugin <= 11.77 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WPMobile.App = 11.77 versions...
CVE-2026-61984
CVE-2026-61984 affects the WordPress WordPress WP Mobile App plugin (WPMobile.App) for versions