CVE-2026-81742

The BE REST Endpoints WordPress plugin through 1.0.0 does not perform any authorization check before allowing widgets to be read, created, updated and deleted, and does not sanitize the values it stores in them, allowing unauthenticated users to inject arbitrary web scripts which will execute in...

CVE-2026-77705

The Booking for Appointments and Events Calendar WordPress plugin before 2.4.10 does not verify that the user editing a customer or employee record is entitled to modify the WordPress account linked to it, allowing users holding Amelia's customer or employee management permissions to set the...

EUVD-2026-76804

The Rox Appointment Booking WordPress plugin before 1.2.3 does not perform any authorization check on the endpoint that returns a booking's confirmation details, and each booking is addressed by a sequential numeric identifier, allowing unauthenticated attackers to read any customer's name, email...

EUVD-2026-76801

The YayPricing WordPress plugin before 3.5.7 does not perform an authorization check on a REST route that saves its pricing rules, allowing users with the subscriber role and above to store JavaScript that executes in the browser of an administrator who opens the YayPricing WordPress plugin befor...

CVE-2026-87888 YayPricing < 3.5.7 - Subscriber+ Stored XSS via save_page_data REST Route

The YayPricing WordPress plugin before 3.5.7 does not perform an authorization check on a REST route that saves its pricing rules, allowing users with the subscriber role and above to store JavaScript that executes in the browser of an administrator who opens the YayPricing WordPress plugin befor...

CVE-2026-87797

The Sprout Invoices WordPress plugin before 20.8.16 has a missing authorization check on the si_edit_private_note AJAX action. Because no capability or ownership verification is performed, any authenticated user with the subscriber role (or higher) can overwrite private notes belonging to other u...

EUVD-2026-76802

The Rox Appointment Booking WordPress plugin before 1.2.0 does not perform any capability or authorization check when saving its holiday schedule, allowing unauthenticated attackers to overwrite the dates the booking system treats as unavailable, which can block legitimate bookings or open dates...

CVE-2026-87888

The YayPricing WordPress plugin before 3.5.7 is vulnerable to stored XSS caused by a missing authorization check on the save_page_data REST route that saves pricing rules. Users with the subscriber role or above can store malicious JavaScript that executes in the browser of an administrator who o...

EUVD-2026-76799

The Sprout Invoices WordPress plugin before 20.8.16 does not perform a capability or ownership check before allowing a private note to be overwritten through one of its AJAX actions, allowing any authenticated user such as a subscriber to overwrite private notes on records belonging to other user...

EUVD-2026-76786

The BE REST Endpoints WordPress plugin through 1.0.0 does not perform any authorization check before allowing widgets to be read, created, updated and deleted, and does not sanitize the values it stores in them, allowing unauthenticated users to inject arbitrary web scripts which will execute in...

CVE-2026-77752

Temporary Login Without Password is a WordPress plugin for managing temporary user access. Versions 1.5 through 1.9.8 fail to verify that a user requesting a temporary login already holds network super admin rights before granting those rights to the new or existing account. In a multisite networ...

CVE-2026-77705

The Amelia (Booking for Appointments and Events Calendar) WordPress plugin before 2.4.10 contains an authorization flaw in its customer/employee record editing feature. The plugin does not verify whether the user editing a record is entitled to modify the linked WordPress account. Users with Amel...

CVE-2024-34444-Exploit-Poc

CVE-2024-34444 - Escáner de Autorización Faltante de Slider Revolution Escáner masivo profesional para CVE-2024-34444 que afecta al plugin de WordPress Slider Revolution 6.7.0 Banner 🎯 Descripción CVE-2024-34444 es una vulnerabilidad de Autorización Faltante en el plugin de WordPress Slider...

CVE-2025-29927

CVE-2025-29927 Reproducción y corrección de la vulnerabilidad CVE-2025-29927. root@kitploit: git clone [email protected]:Bongni/CVE-2025-29927.git cd CVE-2025-29927 En vulnerable/ hay una versión de la aplicación que es vulnerable al ataque. En fixed/ hay una versión de la aplicación que est...

CVE-2022-1203

CVE-2022-1203 Content Mask 1.8.4 - Subscriber+ Arbitrary Options Update Description The Content Mask WordPress plugin before 1.8.4.1 does not have authorisation and CSRF checks in various AJAX actions, as well as does not validate the option to be updated to ensure it belongs to the plugin. As a...

CVE-2025-65669

CVE-2025-65669 Se descubrió un problema en classroomio 0.1.13. Las cuentas de estudiantes pueden eliminar cursos desde la página Explorar sin ninguna comprobación de autorización o autenticación, omitiendo la restricción de eliminación exclusiva para administradores que se esperaba. Descubierto...

CVE-2025-34171

CVE-2025-34171: Exposición no autenticada de archivos y datos de depuración en CasaOS Resumen de la vulnerabilidad Campo| Valor ---|--- CVE ID| CVE-2025-34171 Afecta| CasaOS ≤ 0.4.15 Corregido en| No hay parche disponible Gravedad| Media CVSS 4.0|...

EUVD-2026-76743

The application's role-authorization lookup defaults to granting access when a request handler's name is not present in its table of role requirements, rather than defaulting to deny. Any request handler that is not explicitly registered in this table is reachable by any authenticated user...

EUVD-2026-76746

A routing rule selects between two different authentication mechanisms for the same downstream service based on the value of a client-supplied request header, rather than on any property the client cannot control. An authenticated user in possession of a shared service credential can set this...

PT-2026-90637

MCPHub before 1.0.32 contains an authentication bypass vulnerability in its embedded OAuth 2.0 authorization server where client authentication is disabled by default and PKCE enforcement is optional. Attackers who obtain an authorization code through interception can redeem it for access tokens...