223917 matches found
PYSEC-2026-3491 OpenStack Neutron: Neutron port RBAC policy bypass allows project managers to set trusted device owners on shared networks
In OpenStack Neutron before 28.0.1, a project manager can create or update a port on a shared network owned by another project and set deviceowner to a value that has "network:" at the beginning "network:dhcp" for example. The default port RBAC policies incorrectly included PROJECTMANAGER without...
WordPress CoCart – Headless ecommerce plugin <= 4.8.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by VanTastic in WordPress Plugin CoCart – Headless ecommerce versions = 4.8.4...
WordPress Thrive Product Manager plugin <= 10.9.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Austin Ginder in WordPress Plugin Thrive Product Manager versions = 10.9.2...
EUVD-2026-48138
Subscriber Broken Access Control in Cyr to Lat reloaded – transliteration of links and file names = 1.3.3 versions...
CVE-2026-65537
CVE-2026-65537 concerns a WordPress plugin, Cyr to Lat reloaded – transliteration of links and file names , affected in versions
EUVD-2026-48132
Unauthenticated Broken Access Control in Qubely = 1.8.14 versions...
EUVD-2026-48131
Subscriber Broken Access Control in TemplateSpare = 4.2.2 versions...
CVE-2026-65530
Technical details for CVE-2026-65530 are not publicly available in the provided documents; the description notes a broken access control in TemplateSpare
EUVD-2026-48130
Unauthenticated Broken Access Control in Graphina = 3.1.12 versions...
CVE-2026-65529
Technical details are not publicly available in the provided documents; monitor for updates on the Graphina WordPress plugin
EUVD-2026-48126
Unauthenticated Broken Access Control in Civi Framework = 2.2.0 versions...
CVE-2026-65525
CVE-2026-65525 affects the WordPress Civi Framework plugin up to version 2.2.0. The issue is unauthenticated broken access control, enabling access to resources or actions that should be restricted. The available documents identify the affected software and the vulnerability class but do not prov...
CVE-2026-65524
Technical details for CVE-2026-65524 are not publicly available in the provided documents. Monitor for updates.
EUVD-2026-48125
Contributor Broken Access Control in Avada Custom Branding = 1.2 versions...
EUVD-2026-48115
Unauthenticated Broken Access Control in MP3 Audio Player for Music, Radio & Podcast by Sonaar = 5.12 versions...
CVE-2026-65500
Unauthenticated Broken Access Control in Manual - Documentation, Knowledge Base & Education WordPress Theme = 7.5.4 versions...
EUVD-2026-48111
Unauthenticated Broken Access Control in Manual - Documentation, Knowledge Base & Education WordPress Theme = 7.5.4 versions...
CVE-2026-65500
CVE-2026-65500 concerns the WordPress Manual - Documentation, Knowledge Base & Education Theme, affected through version