264925 matches found
CVE-2026-42638: Missing Authorization
Missing Authorization vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through 3.7.1...
CVE-2026-39751: Missing Authorization
Unauthenticated Broken Access Control in PayPlug for WooCommerce Official = 3.1.0 versions...
CVE-2026-39749: Missing Authorization
Subscriber Broken Access Control in App for Cloudflare® = 1.10.1 versions...
CVE-2026-39730: Missing Authorization
Missing Authorization vulnerability in Marcin Wise Chat wise-chat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wise Chat: from n/a through 3.4.3...
CVE-2026-32578: Missing Authorization
Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce = 1.1.2606090 versions...
CVE-2026-25433: Missing Authorization
Subscriber Broken Access Control in WP2LEADS = 3.5.7 versions...
CVE-2026-105059: Missing Authorization
Missing Authorization vulnerability in royalnavneet Delete All Comments of wordpress delete-all-comments-of-website allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Delete All Comments of wordpress: from n/a through 7.1...
CVE-2026-41560: Missing Authorization
Unauthenticated Broken Access Control in WXD Backup Lite = 1.0.2 versions...
CVE-2026-39794: Missing Authorization
Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API = 1.6.3 versions...
CVE-2026-39787: Missing Authorization
Unauthenticated Broken Access Control in 10Web Social Photo Feed = 1.4.35 versions...
CVE-2026-39776: Improper Control of Generation of Code
Editor Remote Code Execution RCE in Tabs = 2.5 versions...
CVE-2026-39796: Missing Authorization
Unauthenticated Broken Access Control in Advanced Posts Listing – Show Post List Easily = 1.0.8 versions...
CVE-2026-105855: Improper Access Control
Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, the server fails to enforce a field-level access.update restriction on the password field of an authentication collection. This issue is fixed in versions...
CVE-2026-105851: Improper Access Control
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, the duplicate operation copies values from a source document even when a field is hidden or its access.read or access.create rule rejects that val...
Security Advisory 0190
Security Advisory 0190 . CSAF PDF Date: October 6, 2026 Revision | Date | Changes ---|---|--- 1.0 | October 6, 2026 | Initial release Description All of the CVEs covered in this advisory affect only CloudVision-CUE on-premises. CV-CUE is Arista’s Wi-Fi management service and, in on-premises...
CVE-2026-106462: Unintended Proxy or Intermediary
Backstage is an open framework for building developer portals. Prior to 1.54.6, scaffolder source-control actions may not consistently enforce intended credential boundaries. An authenticated user could cause an affected action to fall back to broader integration credentials and perform operation...
CVE-2026-102159: Missing Authentication for Critical Function
An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality intended only for internal services. Successful exploitation may expose sensitive location information or disrupt affected services...
ROS-20261006-73-0163
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...