818 matches found
EUVD-2026-60804
Unauthenticated Broken Authentication in Piraeus Bank WooCommerce Payment Gateway 3.2.0 versions...
CVE-2026-73399 WordPress Flutterwave WooCommerce plugin <= 3.3.0 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in Flutterwave WooCommerce = 3.3.0 versions...
CVE-2026-73398 WordPress Piraeus Bank WooCommerce Payment Gateway plugin 3.2.0 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in Piraeus Bank WooCommerce Payment Gateway 3.2.0 versions...
CVE-2026-73398
The WordPress Piraeus Bank WooCommerce Payment Gateway plugin 3.2.0 has a broken authentication flaw exploitable by unauthenticated remote attackers, allowing unauthorized actions with low integrity and availability impact. CVSS 6.5 (Medium). Patchstack advisory linked; no exploit code or specifi...
CVE-2026-73396 WordPress MWB HubSpot for WooCommerce plugin <= 1.6.7 - Broken Authentication vulnerability
Subscriber Broken Authentication in MWB HubSpot for WooCommerce = 1.6.7 versions...
CVE-2026-73396
The MWB HubSpot for WooCommerce plugin (≤1.6.7) has a broken authentication flaw exploitable by any logged-in subscriber over the network with low complexity, causing high availability impact and low integrity impact (CVSS 7.1); upgrading beyond 1.6.7 is recommended. Patchstack advisory: https://...
EUVD-2026-60802
Subscriber Broken Authentication in MWB HubSpot for WooCommerce = 1.6.7 versions...
CVE-2026-73396
Subscriber Broken Authentication in MWB HubSpot for WooCommerce = 1.6.7 versions...
EUVD-2026-60796
Unauthenticated Broken Authentication in Popup by Supsystic = 1.13.0 versions...
CVE-2026-73381 WordPress Popup by Supsystic plugin <= 1.13.0 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in Popup by Supsystic = 1.13.0 versions...
CVE-2026-73381
Unauthenticated Broken Authentication in Popup by Supsystic = 1.13.0 versions...
CVE-2026-73381
The WordPress Popup by Supsystic plugin (versions ≤ 1.13.0) has an unauthenticated broken authentication flaw rated CVSS 9.1 (Critical), allowing remote attackers to bypass authentication with no privileges, risking integrity and availability. No exploitation or patch details are provided in the ...
EUVD-2026-60777
Unauthenticated Broken Authentication in SupportCandy = 3.5.1 versions...
CVE-2026-73350
SupportCandy is a WordPress plugin affected by an unauthenticated Broken Authentication vulnerability in versions ≤ 3.5.1 . The flaw allows a remote, unauthenticated attacker to bypass authentication over the network with low complexity and no user interaction, resulting in high confidentiality i...
CVE-2026-73350
Unauthenticated Broken Authentication in SupportCandy = 3.5.1 versions...
CVE-2026-73350 WordPress SupportCandy plugin <= 3.5.1 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in SupportCandy = 3.5.1 versions...
CVE-2026-32481
Unauthenticated Broken Authentication in Ezoic = 2.22.11 versions...
CVE-2026-32481 WordPress Ezoic plugin <= 2.22.11 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in Ezoic = 2.22.11 versions...
CVE-2026-32481
The WordPress Ezoic plugin (versions ≤ 2.22.11) contains an unauthenticated broken authentication flaw discovered by HaiND. CVSS 7.5 HIGH (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) means any remote attacker can bypass authentication and access confidential data without credentials. No fix version or i...