190268 matches found
PT-2026-103202
Subscriber Broken Access Control in MakeCommerce for WooCommerce = 4.1.0 versions...
PT-2026-103258
Contributor Broken Access Control in The Events Calendar = 6.17.5 versions...
PT-2026-103251
Subscriber Broken Access Control in Prevent files / folders access = 2.6.7 versions...
PT-2026-103235
Subscriber Broken Access Control in MCP Content Manager Lite = 1.1.0 versions...
PT-2026-103491
Unauthenticated Broken Access Control in Ultimate Maps by Supsystic = 1.5.5 versions...
PT-2026-103203
Unauthenticated Broken Access Control in WP Express Checkout Accept PayPal Payments = 2.4.9 versions...
PT-2026-103616
agentgpt v.1.0.0 is vulnerable to Incorrect Access Control in next/src/server/api/routers/agentRouter.ts. An externally reachable path accepts a caller-selected object or tenant identifier and reaches a data-access operation without a visible owner, tenant, workspace, or membership binding on tha...
CVE-2026-51867
The software agentgpt v.1.0.0 is vulnerable to Incorrect Access Control within the next/src/server/api/routers/agentRouter.ts component. The issue stems from an externally reachable path that accepts a caller-selected object or tenant identifier, allowing it to perform data-access operations with...
PT-2026-103486
Subscriber Broken Access Control in Optimole = 4.2.14 versions...
PT-2026-103352
Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Windows and Linux affected versions not specified Description A flaw exists in the kernel mode layer that allows an attacker to cause improper access control. This issue could result in a denial of service, which ...
CVE-2026-102132: Improper Access Control
An administrative import function in Kiteworks Core did not verify that the requesting administrator was entitled to create the privileged integration credential being imported. A delegated administrator holding a single narrowly scoped administrative permission could therefore obtain full system...
PT-2026-103306
Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2026.2.18991 Description Improper access control on the Gantt chart allows users with view-only permissions to perform edits. Recommendations Update to version 2026.2.18991...
CVE-2026-89190: Improper Access Control
The Robin Image Optimizer WordPress plugin before 2.0.8 does not check the user's capabilities before dispatching one of its bundled admin framework's request handlers, allowing users with a subscriber-level account to render admin-only Robin Image Optimizer WordPress plugin before 2.0.8 pages an...
PT-2026-103169
Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms = 2.7.2 versions...
CVE-2026-94120: Missing Authorization
Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms = 2.7.2 versions...
PT-2026-103010
Name of the Vulnerable Software and Affected Versions Pexip Infinity versions prior to 38.2 Pexip Infinity version 39.0 Pexip Infinity version 39.1 Pexip Infinity version 40.0 Description Improper access control on a product-internal API allows an attacker with local access to a node within an...
CVE-2026-88797: Improper Access Control
The Vayu X WordPress theme before 1.0.6 does not perform any capability check on one of its AJAX actions and exposes the nonce guarding it to every logged-in user, allowing any authenticated user, such as a subscriber, to install and activate any hosted on the WordPress.org repository...
CVE-2026-100259: Incorrect Authorization
In JetBrains YouTrack before 2026.2.18991 improper access control on Gantt chart allowed edits by users with view-only access...