PT-2026-4064

Name of the Vulnerable Software and Affected Versions Themefic Hydra Booking versions through 1.1.32 Description A privilege assignment issue exists in Themefic Hydra Booking hydra-booking, potentially allowing privilege escalation. The issue allows for unauthorized access or actions due to...

PT-2026-3983

Name of the Vulnerable Software and Affected Versions Jthemes xSmart versions through 1.2.9.4 Description An incorrect privilege assignment exists in Jthemes xSmart, potentially allowing privilege escalation. Recommendations Update Jthemes xSmart to a version later than 1.2.9.4...

PT-2026-4044

Name of the Vulnerable Software and Affected Versions Lawyer Directory versions through 1.3.3 Description An incorrect privilege assignment exists in the Lawyer Directory application, potentially allowing privilege escalation. Recommendations Update Lawyer Directory to a version later than 1.3.3...

CVE-2025-67953: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in Booking Activities Team Booking Activities booking-activities allows Privilege Escalation.This issue affects Booking Activities: from n/a through = 1.16.44...

CVE-2025-69292: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in e-plugins WP Membership wp-membership allows Privilege Escalation.This issue affects WP Membership: from n/a through = 1.6.4...

CVE-2025-69183: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in e-plugins Hospital Doctor Directory hospital-doctor-directory allows Privilege Escalation.This issue affects Hospital Doctor Directory: from n/a through = 1.3.9...

CVE-2025-50007: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in Jthemes xSmart xsmart allows Privilege Escalation.This issue affects xSmart: from n/a through = 1.2.9.4...

CVE-2025-67966: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in e-plugins Lawyer Directory lawyer-directory allows Privilege Escalation.This issue affects Lawyer Directory: from n/a through = 1.3.3...

PT-2026-4186

Incorrect Privilege Assignment vulnerability in e-plugins WP Membership wp-membership allows Privilege Escalation.This issue affects WP Membership: from n/a through = 1.6.4...

CVE-2025-69182: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in e-plugins Institutions Directory institutions-directory allows Privilege Escalation.This issue affects Institutions Directory: from n/a through = 1.3.4...

CVE-2026-22280: Incorrect Permission Assignment for Critical Resource

Dell PowerScale OneFS, versions 9.5.0.0 through 9.5.1.5, versions 9.6.0.0 through 9.7.1.10, versions 9.8.0.0 through 9.10.1.3, versions starting from 9.11.0.0 and prior to 9.13.0.0, contains an incorrect permission assignment for critical resource vulnerability. A low privileged attacker with loc...

Azure Linux 3.0 Security Update: kernel (CVE-2024-49901)

"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49901 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: Assign msmgpu-pdev...

PT-2026-4033

Name of the Vulnerable Software and Affected Versions Booking Activities versions n/a through 1.16.44 Description A flaw exists in Booking Activities that allows for privilege escalation due to incorrect privilege assignment. The issue impacts the booking-activities component. Recommendations...

CVE-2025-69293: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in e-plugins Final User final-user allows Privilege Escalation.This issue affects Final User: from n/a through = 1.2.5...

VulnCheck KEV: CVE-2025-67953

Incorrect Privilege Assignment vulnerability in Booking Activities Team Booking Activities booking-activities allows Privilege Escalation.This issue affects Booking Activities: from n/a through = 1.16.44...

CVE-2025-12985: Incorrect Permission Assignment for Critical Resource

IBM Licensing Operator incorrectly assigns privileges to security critical files which could allow a local root escalation inside a container running the IBM Licensing Operator image...

CVE-2026-23800

Incorrect Privilege Assignment vulnerability in Modular DS modular-connector allows Privilege Escalation.This issue affects Modular DS: from 2.5.2 before 2.6.0...

CVE-2026-23800

CVE-2026-23800 concerns the Modular DS modular-connector in WordPress Modular DS plugin versions 2.5.2 up to 2.5.9, where an incorrect privilege assignment could enable privilege escalation. Multiple sources (NVD, Red Hat, CVE list, vuln enrichment) confirm the issue and scope: affected product i...

CVE-2026-23800 WordPress Modular DS plugin <= 2.5.2 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Modular DS modular-connector allows Privilege Escalation.This issue affects Modular DS: from 2.5.2 before 2.6.0...

VulnCheck KEV: CVE-2026-23800

Incorrect Privilege Assignment vulnerability in Modular DS modular-connector allows Privilege Escalation.This issue affects Modular DS: from 2.5.2 before 2.6.0...