CVE-2026-73396

Subscriber Broken Authentication in MWB HubSpot for WooCommerce = 1.6.7 versions...

CVE-2026-73381

Unauthenticated Broken Authentication in Popup by Supsystic = 1.13.0 versions...

CVE-2026-73350

Unauthenticated Broken Authentication in SupportCandy = 3.5.1 versions...

CVE-2026-32481

Unauthenticated Broken Authentication in Ezoic = 2.22.11 versions...

EUVD-2026-60809

Subscriber Broken Authentication in User Registration = 5.2.6 versions...

CVE-2026-73995 WordPress User Registration plugin <= 5.2.6 - Broken Authentication vulnerability

Subscriber Broken Authentication in User Registration = 5.2.6 versions...

CVE-2026-73995

The WordPress User Registration plugin (versions ≤ 5.2.6) has a broken authentication flaw allowing subscribers to bypass access controls; CVSS 5.4 (MEDIUM). CISA SSVC reports no active exploitation. No exploit code is provided; upgrade beyond 5.2.6 to remediate. Details via Patchstack reference.

EUVD-2026-60805

Unauthenticated Broken Authentication in Flutterwave WooCommerce = 3.3.0 versions...

CVE-2026-73399

The rave-woocommerce-payment-gateway plugin (versions ≤ 3.3.0) has an unauthenticated broken authentication flaw allowing remote attackers to bypass login, rated CVSS 6.5 (Medium). No exploitation evidence is provided; update to a newer plugin version when available. Reference: https://patchstack...

CVE-2026-73398

Unauthenticated Broken Authentication in Piraeus Bank WooCommerce Payment Gateway 3.2.0 versions...

CVE-2026-73399

Unauthenticated Broken Authentication in Flutterwave WooCommerce = 3.3.0 versions...

CVE-2026-73398

The WordPress Piraeus Bank WooCommerce Payment Gateway plugin 3.2.0 has a broken authentication flaw exploitable by unauthenticated remote attackers, allowing unauthorized actions with low integrity and availability impact. CVSS 6.5 (Medium). Patchstack advisory linked; no exploit code or specifi...

EUVD-2026-60804

Unauthenticated Broken Authentication in Piraeus Bank WooCommerce Payment Gateway 3.2.0 versions...

CVE-2026-73399 WordPress Flutterwave WooCommerce plugin <= 3.3.0 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in Flutterwave WooCommerce = 3.3.0 versions...

CVE-2026-73398 WordPress Piraeus Bank WooCommerce Payment Gateway plugin 3.2.0 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in Piraeus Bank WooCommerce Payment Gateway 3.2.0 versions...

CVE-2026-73396

The MWB HubSpot for WooCommerce plugin (≤1.6.7) has a broken authentication flaw exploitable by any logged-in subscriber over the network with low complexity, causing high availability impact and low integrity impact (CVSS 7.1); upgrading beyond 1.6.7 is recommended. Patchstack advisory: https://...

CVE-2026-73396 WordPress MWB HubSpot for WooCommerce plugin <= 1.6.7 - Broken Authentication vulnerability

Subscriber Broken Authentication in MWB HubSpot for WooCommerce = 1.6.7 versions...

CVE-2026-73396

Subscriber Broken Authentication in MWB HubSpot for WooCommerce = 1.6.7 versions...

EUVD-2026-60802

Subscriber Broken Authentication in MWB HubSpot for WooCommerce = 1.6.7 versions...

EUVD-2026-60796

Unauthenticated Broken Authentication in Popup by Supsystic = 1.13.0 versions...