CVE-2026-59547

CVE-2026-59547 describes an unauthenticated Broken Access Control in the WordPress Payment Gateway for PayPal on WooCommerce plugin, versions

EUVD-2026-48199

Unauthenticated Broken Access Control in Payment Gateway for PayPal on WooCommerce = 9.1.4 versions...

EUVD-2026-48189

Subscriber Broken Access Control in WP ERP = 1.17.5 versions...

CVE-2026-59522

The CVE-2026-59522 entry concerns the WordPress WP ERP plugin (versions

CVE-2026-59522 WordPress WP ERP plugin <= 1.17.5 - Broken Access Control vulnerability

Subscriber Broken Access Control in WP ERP = 1.17.5 versions...

EUVD-2026-48177

Unauthenticated Broken Access Control in Knit Pay = 9.6.0.0 versions...

CVE-2026-57717

CVE-2026-57717 corresponds to an unauthenticated broken access control vulnerability in the WordPress Knit Pay plugin, affecting versions

CVE-2026-57703

CVE-2026-57703 affects WordPress Sunshine Photo Cart plugin versions

EUVD-2026-48174

Subscriber Broken Access Control in Sunshine Photo Cart = 3.6.10.1 versions...

CVE-2026-57425

CVE-2026-57425 affects the WordPress plugin Autopay dla WooCommerce (versions

CVE-2026-27423

Technical details (affected versions, root cause, impact, patches) are not publicly provided in the supplied documents. Monitor for updates.

EUVD-2026-48162

Subscriber Broken Access Control in WP Booking System 5.12.8.1 versions...

EUVD-2026-48161

Subscriber Broken Access Control in Participants Database = 2.7.8.4 versions...

CVE-2026-57367

CVE-2026-57367 affects the WordPress plugin WP Booking System, specifically versions prior to 5.12.8.1. The vulnerability is a Broken Access Control issue impacting the plugin’s ability to enforce access permissions, with exposed integrity risk (High) and limited availability impact as per Patchs...

CVE-2026-27422

The CVE-2026-27422 entry concerns the WordPress YT Player plugin (versions

EUVD-2026-48160

Unauthenticated Broken Access Control in YT Player = 2.0.9 versions...

CVE-2026-27418

The CVE-2026-27418 entry concerns the WordPress plugin WP Fast Total Search

EUVD-2026-48159

Unauthenticated Broken Access Control in WP Fast Total Search = 1.81.282 versions...

EUVD-2026-48157

Unauthenticated Broken Access Control in MarketKing = 2.1.40 versions...

CVE-2026-27399

CVE-2026-27399 concerns the WordPress MarketKing plugin, versions ≤ 2.1.40. The connected documents describe an Unauthenticated Broken Access Control vulnerability in MarketKing, meaning an unauthenticated attacker can bypass access controls. The exact impact details (which data or actions are ex...