855 matches found
CVE-2026-81796 WordPress WP Travel plugin <= 12.0.3 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in WP Travel = 12.0.3 versions...
EUVD-2026-75520
Unauthenticated Broken Authentication in IMPress for IDX Broker = 3.3.0 versions...
CVE-2026-81787
CVE-2026-81787 affects the WordPress plugin IMPress for IDX Broker (versions ≤ 3.3.0 ). The vulnerability is an unauthenticated Broken Authentication flaw, meaning an attacker with network access and no prior credentials can exploit it. The CVSS 3.1 score is 6.5 (Medium) with a vector of AV:N/AC:...
CVE-2026-81787 WordPress IMPress for IDX Broker plugin <= 3.3.0 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in IMPress for IDX Broker = 3.3.0 versions...
EUVD-2026-75516
Subscriber Broken Authentication in MailMunch – Grow your Email List = 3.2.5 versions...
CVE-2026-81783
CVE-2026-81783 affects the WordPress plugin MailMunch – Grow your Email List , versions ≤ 3.2.5 . The vulnerability is a Broken Authentication flaw exploitable by users with the Subscriber role. Discovered by Jakub Herman , it carries a CVSS 3.1 score of 7.1 (HIGH) with the vector AV:N/AC:L/PR:L/...
CVE-2026-81783 WordPress MailMunch – Grow your Email List plugin <= 3.2.5 - Broken Authentication vulnerability
Subscriber Broken Authentication in MailMunch – Grow your Email List = 3.2.5 versions...
WordPress WP Travel plugin <= 12.0.3 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by CidKagenouSama in WordPress Plugin WP Travel versions = 12.0.3...
WordPress MailMunch – Grow your Email List plugin <= 3.2.5 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by Jakub Herman in WordPress Plugin MailMunch – Grow your Email List versions = 3.2.5...
WordPress IMPress for IDX Broker plugin <= 3.3.0 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by HaiND in WordPress Plugin IMPress for IDX Broker versions = 3.3.0...
CVE-2026-84777
Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...
EUVD-2026-70573
Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...
CVE-2026-84777 WordPress Really Simple SSL plugin <= 9.8.0 - 2FA Bypass vulnerability
Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...
CVE-2026-84777
WordPress Really Simple SSL plugin versions ≤ 9.8.0 are affected by an unauthenticated broken authentication vulnerability described as a 2FA bypass . The flaw allows a network-based attacker (with no prior privileges or user interaction, but high attack complexity) to compromise authentication, ...
BASM (Broken Authentication & Session Management) Bouncy Castle Dependency in Jira Service Management Data Center and Server
This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-12802 was introduced in 10.0.0 and later of Jira Service Management Data Center and Server. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.7 and a CVSS...
EUVD-2026-69861
The OAuth Single Sign On WordPress plugin before 7.0.1 does not verify the identity assertion returned by its Steam single sign-on flow, allowing unauthenticated attackers to log in as an arbitrary non-administrator user, and to create new accounts...
EUVD-2026-69790
Team Password Manager before 14.184.308 fails to enforce authentication requirements in the local account password reset flow. Unauthenticated attackers can reset local account passwords and authenticate as those users to gain unauthorized access...
CVE-2026-82225
Unauthenticated Broken Authentication in RegistrationMagic = 6.0.9.8 versions...