WordPress Grand News theme <= 3.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Grand News versions = 3.4...

WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.13.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by she11f in WordPress Plugin Barcode Scanner with Inventory & Order Manager versions = 1.13.1...

WordPress Th Shop Mania theme <= 1.9.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by HaiND in WordPress Theme Th Shop Mania versions = 1.9.1...

Improper Access Control

Payload is vulnerable to improper access control. The vulnerability is due to insufficient enforcement of the access.update restriction, which allows an attacker with appropriate access to bypass the restriction and modify a user's password...

CVE-2026-46331

CVE-2026-46331 pedit COW – Vulnerabilidad de Envenenamiento de Caché de Páginas en el Editor de Paquetes de Linux net/sched Resumen Ejecutivo CVE-2026-46331 apodado “pedit COW” es una falla local de escalada de privilegios en el kernel de Linux en el subsistema de control de tráfico. Un usuario n...

cve-2025-57819-freepbx-range

CVE-2025-57819 FreePBX Cyber Range Isolated educational cyber-range for CVE-2025-57819 CWE-89, CWE-288. Original FreePBX-compatible training application — not official Sangoma FreePBX. Quick start git clone https://github.com/shivammittal2403/cve-2025-57819-freepbx-range cd...

CVE-2026-27434

Missing Authorization vulnerability in sc Internet Vivoo WP Rentals wprentals allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Rentals: from n/a through 3.14.2...

CVE-2026-104390

Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.27...

CVE-2026-103075

Missing Authorization vulnerability in WPMU DEV Hustle wordpress-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hustle: from n/a through 7.8.14.2...

CVE-2026-27434

The WP Rentals WordPress theme, versions up to and including 3.14.2 , is vulnerable to a Broken Access Control issue (CWE-862). The vulnerability stems from incorrectly configured access control security levels , which may allow an unauthenticated attacker to exploit missing authorization checks....

EUVD-2026-94260

Missing Authorization vulnerability in sc Internet Vivoo WP Rentals wprentals allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Rentals: from n/a through 3.14.2...

CVE-2026-27434 WordPress WP Rentals theme <= 3.14.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in sc Internet Vivoo WP Rentals wprentals allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Rentals: from n/a through 3.14.2...

CVE-2026-27434 WordPress WP Rentals theme <= 3.14.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in sc Internet Vivoo WP Rentals wprentals allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Rentals: from n/a through 3.14.2...

WordPress WP Rentals theme <= 3.14.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme WP Rentals versions = 3.14.2...

EUVD-2026-94259

Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.27...

CVE-2026-104390 WordPress Booktics plugin <= 1.0.27 - Broken Access Control vulnerability

Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.27...

CVE-2026-104390 WordPress Booktics plugin <= 1.0.27 - Broken Access Control vulnerability

Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.27...

CVE-2026-104390

The Booktics WordPress plugin (versions up to and including 1.0.27 ) is affected by a Broken Access Control vulnerability. This issue stems from Missing Authorization (CWE-862), where incorrectly configured access control security levels allow for unauthorized actions. The impact is categorized a...

WordPress Booktics plugin <= 1.0.27 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Oly Hossen in WordPress Plugin Booktics versions = 1.0.27...

CVE-2026-97146 Apache YuniKorn: Admission control bypass via system label forgery

Apache YuniKorn 1.9.0 and earlier allows bypassing the check for the user annotation by setting a secondary label on the pod. If the pod has the label 'app=yunikorn' the checks limiting the user annotation content are not run. The label is used to identify the YuniKorn application itself in the...