13593 matches found
CVE-2026-49463 NL Portal: Missing per-user authorization on document and decision GraphQL queries in nl-portal-backend-libraries
NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations. The nl.nl-portal:documenten-api package through version 3.0.0 and the nl.nl-portal:besluiten package from version 1.5.0 through 3.0.0...
CVE-2026-49463
NL Portal Backend Libraries (Dutch government portal backend) contained a missing per-user authorization in two GraphQL resolver areas. The nl.nl-portal:documenten-api package (all versions up to 3.0.0) and nl.nl-portal:besluiten package (1.5.0–3.0.0) both declared resolvers without an authentica...
CVE-2026-62136
Unauthenticated Broken Access Control in Flexible Quantity – Measurement Price Calculator for WooCommerce = 2.3.21 versions...
CVE-2026-62135
Unauthenticated Broken Access Control in Booktics = 1.0.24 versions...
CVE-2026-62132
Subscriber Broken Access Control in Masteriyo - LMS = 3.4.0 versions...
CVE-2026-62114
Unauthenticated Broken Access Control in Passster = 4.3.13 versions...
CVE-2026-27378
Unauthenticated Broken Access Control in Deposits and Partial Payments for WooCommerce = 3.1.0 versions...
CVE-2026-81908
Concrete CMS 9.2.0 to 9.5.2 contain a missing authorization vulnerability in the REST API Groups list endpoint. The listGroups method in concrete/src/Api/Controller/Groups.php registers a permissions checker callback that unconditionally returns true, so no per-object tree node authorization is...
CVE-2026-62089 WordPress Master Addons for Elementor plugin <= 3.2.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Pixar Labs Master Addons for Elementor allows Privilege Abuse. This issue affects Master Addons for Elementor: from n/a through 3.2.2...
CVE-2026-62089
CVE-2026-62089 is a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin Master Addons for Elementor by Pixar Labs, affecting versions from n/a through 3.2.2 . The flaw allows Privilege Abuse , enabling a low-privilege authenticated user to exploit the missing autho...
WordPress Master Addons for Elementor plugin <= 3.2.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by TurboNexic in WordPress Plugin Master Addons for Elementor versions = 3.2.2...
CVE-2026-62136 WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.21 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Flexible Quantity – Measurement Price Calculator for WooCommerce = 2.3.21 versions...
EUVD-2026-76201
Unauthenticated Broken Access Control in Flexible Quantity – Measurement Price Calculator for WooCommerce = 2.3.21 versions...
CVE-2026-62136
CVE-2026-62136 affects the WordPress plugin Flexible Quantity – Measurement Price Calculator for WooCommerce in versions
EUVD-2026-76202
Unauthenticated Broken Access Control in Booktics = 1.0.24 versions...
CVE-2026-62135
CVE-2026-62135 affects the WordPress Booktics plugin in versions ≤ 1.0.24 , introducing an unauthenticated Broken Access Control vulnerability. The flaw allows remote attackers with no prior access to modify data on the target site, resulting in a low integrity impact (CVSS 3.1: 5.3 MEDIUM , vect...
CVE-2026-62135 WordPress Booktics plugin <= 1.0.24 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Booktics = 1.0.24 versions...
CVE-2026-62132
CVE-2026-62132 is a Broken Access Control vulnerability affecting the Masteriyo – LMS WordPress plugin in versions ≤ 3.4.0 . The flaw allows users with the Subscriber role to bypass access controls, resulting in a low integrity impact (CVSS 3.1 score: 5.3 MEDIUM ). The vulnerability was discovere...