CVE-2026-119096

The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to an Authentication Bypass in versions up to and including 3.8.2 . The issue stems from a parser-differential flaw within the uo_login_action() function's email parameter. While the plugin's account-verification gate uses the r...

CVE-2026-6145

CVE-2026-6145 — User Registration & Membership for WordPress: Unauthenticated Admin Approval Bypass Proof-of-concept exploit for CVE-2026-6145 , a missing authorization vulnerability in the User Registration & Membership plugin for WordPress ≤ 5.1.5 that allows unauthenticated attackers to bypass...

WordPress Essential Addons for Elementor plugin 6.7.3-6.8.6 - Unauthenticated Registration Approval Bypass vulnerability

Unauthenticated Registration Approval Bypass vulnerability discovered by Jashid Sany in WordPress Plugin Essential Addons for Elementor versions 6.7.3-6.8.6...

CVE-2026-110508 Essential Addons for Elementor 6.7.3 - 6.8.6 - Unauthenticated Registration Approval Bypass via OTP Verification

The Essential Addons for Elementor WordPress plugin before 6.8.7 does not apply its administrator approval requirement to accounts registered through its email one-time-password flow, which could allow unauthenticated users to register and log in without being approved by an administrator when bo...

CVE-2026-110508

The Essential Addons for Elementor WordPress plugin (versions 6.7.3 through 6.8.6 ) contains a vulnerability where the administrator approval requirement is not applied to accounts registered via the email one-time-password (OTP) flow. This flaw allows unauthenticated users to register and log in...

WordPress WholesaleX plugin < 3.0.9 - Unauthenticated Account Activation and Administrator Approval Bypass vulnerability

Unauthenticated Account Activation and Administrator Approval Bypass vulnerability discovered by Naoki Kawahigashi in WordPress Plugin WholesaleX versions 3.0.9...

CVE-2026-111955 WholesaleX < 3.0.9 - Unauthenticated Account Activation and Administrator Approval Bypass

The WholesaleX WordPress plugin before 3.0.9 does not check that a stored account confirmation code is set before comparing it with the one supplied in a request, allowing unauthenticated users to activate pending accounts and bypass the administrator approval required before login...

CVE-2026-111955

The WholesaleX WordPress plugin (versions before 3.0.9 ) is vulnerable to an Improper Authentication flaw (CWE-287 ). The software fails to verify if a stored account confirmation code exists before comparing it against a code provided in an incoming request. This oversight allows unauthenticated...

CVE-2026-111955 WholesaleX < 3.0.9 - Unauthenticated Account Activation and Administrator Approval Bypass

The WholesaleX WordPress plugin before 3.0.9 does not check that a stored account confirmation code is set before comparing it with the one supplied in a request, allowing unauthenticated users to activate pending accounts and bypass the administrator approval required before login...

CVE-2026-77930

EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupton gate. Attackers can plant instructions in ingested content such as fetched web pages, so the agent calls...

CVE-2026-77930 EvoScientist 0.1.0 before 0.2.5 Human Approval Bypass via Async Sub-Agents

EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupton gate. Attackers can plant instructions in ingested content such as fetched web pages, so the agent calls...

CVE-2026-77930 EvoScientist 0.1.0 before 0.2.5 Human Approval Bypass via Async Sub-Agents

EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupton gate. Attackers can plant instructions in ingested content such as fetched web pages, so the agent calls...

CVE-2026-77930

EvoScientist versions 0.1.0 before 0.2.5 are vulnerable to an approval bypass vulnerability. The root cause is the use of async sub-agents that lack an interrupt_on gate, which allows attackers to execute arbitrary host shell commands. By planting malicious instructions in ingested content, such ...

EUVD-2026-104687

EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupton gate. Attackers can plant instructions in ingested content such as fetched web pages, so the agent calls...

CVE-2026-77930

EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupton gate. Attackers can plant instructions in ingested content such as fetched web pages, so the agent calls...

CVE-2026-77930 EvoScientist 0.1.0 before 0.2.5 Human Approval Bypass via Async Sub-Agents

EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupton gate. Attackers can plant instructions in ingested content such as fetched web pages, so the agent calls...

EvoScientist authorization issue vulnerability

In versions prior to 0.2.5 of EvoScientist, version 0.1.0 contains an authorization issue vulnerability stemming from approval bypass. Attackers can delegate commands to asynchronous sub-proxies lacking an interrupton gatekeeper, then inject instructions into web pages and other content they...

PT-2026-117949

EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interrupt on gate. Attackers can plant instructions in ingested content such as fetched web pages, so the agent calls start...

Ollama 0.31.1 Bash Approval Bypass

Ollama version 0.31.1 experimental Agent Mode contains an incorrect authorization flaw that permits appended shell commands to reuse an approved command prefix. The proof of concept exercises the vulnerable approval logic without executing commands. https://packetstorm.news/download/236043...

CVE-2026-71184 Gitea fork workflow approval bypass through review events

Gitea's pull request review notifier does not attach the pull request to the Actions notification, so the fork workflow approval gate does not recognize the run as originating from a fork. Review comment and review approval or rejection events can consequently load workflow code from the fork hea...