EUVD-2026-85481

Unauthenticated Broken Access Control in AppMySite = 3.15.4 versions...

CVE-2026-94498 WordPress AppMySite plugin <= 3.15.4 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in AppMySite = 3.15.4 versions...

CVE-2026-94498

The AppMySite WordPress plugin (versions

CVE-2026-94080 WordPress MarketKing plugin <= 2.1.70 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in MarketKing = 2.1.70 versions...

CVE-2026-94080 WordPress MarketKing plugin <= 2.1.70 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in MarketKing = 2.1.70 versions...

EUVD-2026-85470

Unauthenticated Broken Access Control in MarketKing = 2.1.70 versions...

CVE-2026-94080

Versions of the MarketKing WordPress plugin up to and including 2.1.70 are susceptible to an unauthenticated broken access control vulnerability. The vulnerability allows an attacker to perform actions without proper authorization. No specific root cause, practical impact details, or remediation ...

CVE-2026-94079 WordPress WP User Manager plugin <= 2.9.19 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in WP User Manager = 2.9.19 versions...

CVE-2026-94079 WordPress WP User Manager plugin <= 2.9.19 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in WP User Manager = 2.9.19 versions...

EUVD-2026-85469

Unauthenticated Broken Access Control in WP User Manager = 2.9.19 versions...

CVE-2026-94079

The WP User Manager plugin for WordPress, affecting versions

CVE-2026-93620 WordPress PayPlus Payment Gateway plugin <= 8.2.5 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in PayPlus Payment Gateway = 8.2.5 versions...

EUVD-2026-85463

Unauthenticated Broken Access Control in PayPlus Payment Gateway = 8.2.5 versions...

CVE-2026-93620

The PayPlus Payment Gateway WordPress plugin, in versions

CVE-2026-93620 WordPress PayPlus Payment Gateway plugin <= 8.2.5 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in PayPlus Payment Gateway = 8.2.5 versions...

CVE-2026-93529 WordPress WSP MCP - AI Agents Connector plugin <= 2.7.0 - Broken Access Control vulnerability

Contributor Broken Access Control in WSP MCP AI Agents Connector = 2.7.0 versions...

EUVD-2026-85461

Contributor Broken Access Control in WSP MCP AI Agents Connector = 2.7.0 versions...

CVE-2026-93529

The WSP MCP – AI Agents Connector plugin for WordPress versions ≤ 2.7.0 is affected by a Broken Access Control vulnerability. The vulnerability specifically affects contributors , which may allow for unauthorized actions or data modification due to improper permission enforcement. No specific roo...

CVE-2026-93529 WordPress WSP MCP - AI Agents Connector plugin <= 2.7.0 - Broken Access Control vulnerability

Contributor Broken Access Control in WSP MCP AI Agents Connector = 2.7.0 versions...

DRUPAL-CONTRIB-2026-190

This module enables you to personalize content for anonymous and authenticated users by showing different blocks to visitors based on client-side conditions. The Smart Content Block submodule doesn't sufficiently check block access when it renders the blocks of a "Display Blocks" reaction through...