EUVD-2026-92956

Unauthenticated Broken Access Control in Fluent Affiliate Pro = 1.6.4 versions...

CVE-2026-39789

The Fluent Affiliate Pro WordPress plugin, version 1.6.4 and below , is vulnerable to an unauthenticated Broken Access Control vulnerability. This flaw is classified as CWE-862: Missing Authorization , allowing an attacker to perform actions without proper authentication. The vulnerability has a ...

CVE-2026-39723

The Morning for WooCommerce plugin (versions

CVE-2026-39723 WordPress Morning for WooCommerce plugin <= 2.4.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Green Invoice Morning for WooCommerce wc-gateway-greeninvoice allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Morning for WooCommerce: from n/a through 2.4.1...

EUVD-2026-92954

Unauthenticated Broken Access Control in Morning for WooCommerce = 2.4.1 versions...

CVE-2026-39723 WordPress Morning for WooCommerce plugin <= 2.4.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Green Invoice Morning for WooCommerce wc-gateway-greeninvoice allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Morning for WooCommerce: from n/a through 2.4.1...

CVE-2026-39599

The WDS MCP Content Manager WordPress plugin affects versions

CVE-2026-39599 WordPress WDS MCP Content Manager plugin <= 3.10.4 - Broken Access Control vulnerability

Contributor Broken Access Control in WDS MCP Content Manager = 3.10.4 versions...

EUVD-2026-92953

Contributor Broken Access Control in WDS MCP Content Manager = 3.10.4 versions...

CVE-2026-39599 WordPress WDS MCP Content Manager plugin <= 3.10.4 - Broken Access Control vulnerability

Contributor Broken Access Control in WDS MCP Content Manager = 3.10.4 versions...

CVE-2026-32582 WordPress IATO MCP plugin <= 1.12.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in iatoai IATO MCP iato-mcp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IATO MCP: from n/a through 1.12.0...

CVE-2026-32582 WordPress IATO MCP plugin <= 1.12.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in iatoai IATO MCP iato-mcp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IATO MCP: from n/a through 1.12.0...

EUVD-2026-92952

Contributor Broken Access Control in IATO MCP = 1.11.0 versions...

CVE-2026-32582

The WordPress IATO MCP plugin in versions

CVE-2026-105072

The FluentBooking Pro WordPress plugin, in versions less than 2.5.0 , is vulnerable to an Unauthenticated Broken Access Control flaw. This vulnerability, classified under CWE-862 (Missing Authorization) , allows an attacker to perform actions without proper authentication. The impact is character...

CVE-2026-105072 WordPress FluentBooking Pro plugin < 2.5.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in FluentBooking Pro 2.5.0 versions...

EUVD-2026-92950

Unauthenticated Broken Access Control in FluentBooking Pro 2.5.0 versions...

CVE-2026-105072 WordPress FluentBooking Pro plugin < 2.5.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in FluentBooking Pro 2.5.0 versions...

wordpress-jetpack-broken-access-control-vulnerable-application

wordpress-jetpack-broken-access-control-vulnerable-application Esta es una aplicación vulnerable para probar el exploit del control de acceso roto Jetpack 13.9.1 CVE-2024-9926. ¡ADVERTENCIA! Esta aplicación contiene vulnerabilidades de seguridad graves. ¡Ejecútela bajo su propio riesgo! Se...

CVE-2026-92821

A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...