EUVD-2026-76201

Unauthenticated Broken Access Control in Flexible Quantity – Measurement Price Calculator for WooCommerce = 2.3.21 versions...

CVE-2026-62135 WordPress Booktics plugin <= 1.0.24 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Booktics = 1.0.24 versions...

CVE-2026-62135

CVE-2026-62135 affects the WordPress Booktics plugin in versions ≤ 1.0.24 , introducing an unauthenticated Broken Access Control vulnerability. The flaw allows remote attackers with no prior access to modify data on the target site, resulting in a low integrity impact (CVSS 3.1: 5.3 MEDIUM , vect...

EUVD-2026-76202

Unauthenticated Broken Access Control in Booktics = 1.0.24 versions...

CVE-2026-62114 WordPress Passster plugin <= 4.3.13 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Passster = 4.3.13 versions...

CVE-2026-62114 WordPress Passster plugin <= 4.3.13 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Passster = 4.3.13 versions...

EUVD-2026-76206

Unauthenticated Broken Access Control in Passster = 4.3.13 versions...

CVE-2026-62132

CVE-2026-62132 is a Broken Access Control vulnerability affecting the Masteriyo – LMS WordPress plugin in versions ≤ 3.4.0 . The flaw allows users with the Subscriber role to bypass access controls, resulting in a low integrity impact (CVSS 3.1 score: 5.3 MEDIUM ). The vulnerability was discovere...

CVE-2026-62114

Unauthenticated Broken Access Control in the WordPress Passster plugin, affecting versions ≤ 4.3.13 . Discovered by Salúa Es-sair (via Patchstack), the flaw allows an unauthenticated attacker over the network with low complexity to achieve low confidentiality impact (CVSS 5.3 / MEDIUM). No integr...

EUVD-2026-76205

Subscriber Broken Access Control in Masteriyo - LMS = 3.4.0 versions...

CVE-2026-62132 WordPress Masteriyo - LMS plugin <= 3.4.0 - Broken Access Control vulnerability

Subscriber Broken Access Control in Masteriyo - LMS = 3.4.0 versions...

CVE-2026-62132 WordPress Masteriyo - LMS plugin <= 3.4.0 - Broken Access Control vulnerability

Subscriber Broken Access Control in Masteriyo - LMS = 3.4.0 versions...

CVE-2026-62106 WordPress SMS Alert Order Notifications plugin <= 3.9.9 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in SMS Alert Order Notifications = 3.9.9 versions...

EUVD-2026-76196

Subscriber Privilege Escalation in Gato GraphQL = 19.2.3 versions...

CVE-2026-62140 WordPress Quiz And Survey Master plugin <= 11.2.5 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References IDOR in Quiz And Survey Master = 11.2.5 versions...

EUVD-2026-76215

Unauthenticated Broken Access Control in Deposits and Partial Payments for WooCommerce = 3.1.0 versions...

EUVD-2026-76216

Unauthenticated Insecure Direct Object References IDOR in Quiz And Survey Master = 11.2.5 versions...

CVE-2026-27378

Deposits and Partial Payments for WooCommerce (versions

CVE-2026-27378 WordPress Deposits and Partial Payments for WooCommerce plugin <= 3.1.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Deposits and Partial Payments for WooCommerce = 3.1.0 versions...

CVE-2026-27378 WordPress Deposits and Partial Payments for WooCommerce plugin <= 3.1.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Deposits and Partial Payments for WooCommerce = 3.1.0 versions...