CVE-2026-110381 WordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through 1.6.12.35...

EUVD-2026-102234

Authorization Bypass Through User-Controlled Key vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through 1.6.12.35...

CVE-2026-110381

The Simply Schedule Appointments WordPress plugin (versions

CVE-2026-110888 WordPress AI Engine plugin <= 3.8.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Meow Apps AI Engine ai-engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engine: from n/a through 3.8.3...

CVE-2026-110888

The Meow Apps AI Engine plugin for WordPress (versions up to and including 3.8.3 ) is vulnerable to a Broken Access Control issue (CWE-862). This Missing Authorization vulnerability allows for the exploitation of incorrectly configured access control security levels. While the specific technical ...

EUVD-2026-102232

Missing Authorization vulnerability in Meow Apps AI Engine ai-engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engine: from n/a through 3.8.3...

EUVD-2026-102231

Missing Authorization vulnerability in WordLift Srl WordLift wordlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordLift: from n/a through 3.54.15...

CVE-2026-110891 WordPress WordLift plugin <= 3.54.15 - Broken Access Control vulnerability

Missing Authorization vulnerability in WordLift Srl WordLift wordlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordLift: from n/a through 3.54.15...

CVE-2026-110891

The WordLift WordPress plugin (versions up to and including 3.54.15 ) is vulnerable to a Broken Access Control issue (CWE-862). The flaw stems from Missing Authorization , which allows for the exploitation of Incorrectly Configured Access Control Security Levels . This vulnerability is accessible...

WordPress AI Engine plugin <= 3.8.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by dzaku in WordPress Plugin AI Engine versions = 3.8.3...

WordPress WordLift plugin <= 3.54.15 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin WordLift versions = 3.54.15...

CVE-2026-110367 WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5...

EUVD-2026-102229

Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5...

CVE-2026-110367

The APIExperts Square for WooCommerce plugin (versions up to and including 4.7.5 ) is vulnerable to a Broken Access Control issue. This Missing Authorization vulnerability (CWE-862) allows for the exploitation of incorrectly configured access control security levels within the plugin. The impact ...

WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin APIExperts Square for WooCommerce versions = 4.7.5...

CVE-2026-110371 WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.12...

EUVD-2026-102228

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.12...

CVE-2026-110371

The WP Chill Strong Testimonials plugin (versions up to and including 3.3.12 ) is vulnerable to a Missing Authorization vulnerability (CWE-862 ). This flaw allows an attacker to exploit incorrectly configured access control security levels . No specific exploit code or remediation steps are provi...

WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ayukiab in WordPress Plugin Strong Testimonials versions = 3.3.12...

Ashwesker-CVE-2026-20045

🚨 CVE-2026-20045 — Zero-Day Breakdown 🚨 🧨 What it is A critical remote code execution RCE vulnerability affecting multiple Cisco Unified Communications products. It was actively exploited in the wild before patches were released. 🔥 Why it’s dangerous 🚫 No authentication required 🖥️ Remote code...