868 matches found
CVE-2026-73350
Unauthenticated Broken Authentication in SupportCandy = 3.5.1 versions...
CVE-2026-73350 WordPress SupportCandy plugin <= 3.5.1 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in SupportCandy = 3.5.1 versions...
CVE-2026-32481
Unauthenticated Broken Authentication in Ezoic = 2.22.11 versions...
CVE-2026-32481 WordPress Ezoic plugin <= 2.22.11 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in Ezoic = 2.22.11 versions...
CVE-2026-32481
The WordPress Ezoic plugin (versions ≤ 2.22.11) contains an unauthenticated broken authentication flaw discovered by HaiND. CVSS 7.5 HIGH (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) means any remote attacker can bypass authentication and access confidential data without credentials. No fix version or i...
EUVD-2026-60909
Unauthenticated Broken Authentication in Ezoic = 2.22.11 versions...
BASM (Broken Authentication & Session Management) in Jira Data Center
This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-21582 was introduced in version 9.12.14, 10.3.0, and 11.3.0 of Jira Software Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.8, allows an...
PT-2026-77116
Name of the Vulnerable Software and Affected Versions MWB HubSpot for WooCommerce versions prior to 1.6.8 Description The software contains a broken authentication mechanism that allows users with Subscriber privileges to bypass authentication requirements. Recommendations Update MWB HubSpot for...
PT-2026-77118
Name of the Vulnerable Software and Affected Versions Piraeus Bank WooCommerce Payment Gateway version 3.2.0 Description The software contains a broken authentication mechanism that allows unauthenticated access. Recommendations At the moment, there is no information about a newer version that...
PT-2026-77119
Unauthenticated Broken Authentication in Flutterwave WooCommerce = 3.3.0 versions...
WordPress User Registration plugin <= 5.2.6 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by DmTomHe in WordPress Plugin User Registration versions = 5.2.6...
WordPress Ezoic plugin <= 2.22.11 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by HaiND in WordPress Plugin Ezoic versions = 2.22.11...
CVE-2026-66465
Unauthenticated Broken Authentication in Cartify = 1.3.0.1 versions...
CVE-2026-66453
Unauthenticated Broken Authentication in Salon booking system = 10.30.26 versions...
CVE-2026-28185
Unauthenticated Broken Authentication in Log in with Google = 1.4.2 versions...
CVE-2026-28008
Unauthenticated Broken Authentication in OAuth Single Sign On – SSO OAuth Client = 7.0.0 versions...
EUVD-2026-57884
Unauthenticated Broken Authentication in Cartify = 1.3.0.1 versions...
CVE-2026-66465
Unauthenticated Broken Authentication in Cartify = 1.3.0.1 versions...
CVE-2026-66465
CVE-2026-66465 affects WordPress Cartify theme (Cartify Multipurpose) versions up to and including 1.3.0.1, with unauthenticated broken authentication that can lead to account takeover. The connected documents confirm the vulnerability type and the affected version range but do not provide remedi...