168357 matches found
CVE-2026-28188
The CVE-2026-28188 entry concerns the WordPress Hydra Booking plugin (versions
EUVD-2026-57966
Unauthenticated Broken Access Control in Hydra Booking = 1.2.2 versions...
CVE-2026-28188
Unauthenticated Broken Access Control in Hydra Booking = 1.2.2 versions...
CVE-2026-28186
The CVE-2026-28186 entry concerns the WordPress Travelfic Toolkit plugin
CVE-2026-28186
Subscriber Broken Access Control in Travelfic Toolkit = 1.5.1 versions...
CVE-2026-28186 WordPress Travelfic Toolkit plugin <= 1.5.1 - Broken Access Control vulnerability
Subscriber Broken Access Control in Travelfic Toolkit = 1.5.1 versions...
EUVD-2026-57964
Subscriber Broken Access Control in Travelfic Toolkit = 1.5.1 versions...
CVE-2026-28181
CVE-2026-28181 concerns the WordPress AcyMailing SMTP Newsletter plugin, affected in versions up to 10.11.1. The issue is described as a Broken Access Control vulnerability, enabling unauthorized access to certain resources due to insufficient access restrictions. Based on the provided metrics, t...
CVE-2026-28181
Subscriber Broken Access Control in AcyMailing SMTP Newsletter = 10.11.1 versions...
CVE-2026-28181 WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Broken Access Control vulnerability
Subscriber Broken Access Control in AcyMailing SMTP Newsletter = 10.11.1 versions...
EUVD-2026-57960
Subscriber Broken Access Control in AcyMailing SMTP Newsletter = 10.11.1 versions...
CVE-2026-28159
Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...
CVE-2026-28159 WordPress Service Finder Booking plugin <= 6.2 - Broken Access Control vulnerability
Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...
EUVD-2026-57952
Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...
CVE-2026-28159
CVE-2026-28159 affects the WordPress plugin “Service Finder Booking” up to version 6.2. The vulnerability is described as Broken Access Control, with CVSS3.1 base metrics: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (medium). Impact: Unauthorized access could affect availability of the service or booking...
EUVD-2026-57948
Unauthenticated Insecure Direct Object References IDOR in Do Lasso = 358 versions...
CVE-2026-27999
Subscriber Broken Access Control in Tourfic = 2.23.1 versions...
CVE-2026-27999
The CVE-2026-27999 entry concerns the WordPress Tourfic plugin, affected in versions up to 2.23.1, with a Broken Access Control vulnerability affecting subscribers. The connected sources explicitly identify the vulnerability type and affected versions but do not provide technical details on the r...