CVE-2026-104675 WordPress Event Tickets plugin <= 5.30.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0...

CVE-2026-104675

The Liquid Web / StellarWP Event Tickets plugin (versions up to and including 5.30.0 ) is susceptible to a Missing Authorization vulnerability (CWE-862). This flaw allows for Exploiting Incorrectly Configured Access Control Security Levels . The impact of this vulnerability is characterized by a ...

WordPress Event Tickets plugin <= 5.30.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Intrudify in WordPress Plugin Event Tickets versions = 5.30.0...

EUVD-2026-92320

Missing Authorization vulnerability in Jeroen Peters Name Directory name-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Name Directory: from n/a through 1.34.2...

CVE-2026-104397

The Jeroen Peters Name Directory WordPress plugin (versions up to and including 1.34.2 ) is vulnerable to a Missing Authorization vulnerability. This flaw allows for the exploitation of incorrectly configured access control security levels , potentially leading to Arbitrary Shortcode Execution . ...

CVE-2026-105055

The WP Mailster plugin for WordPress, versions up to 1.9.0.0 , is vulnerable to a Broken Access Control issue. This vulnerability stems from missing authorization within the wp-mailster component, which allows for the exploitation of incorrectly configured access control security levels. The vuln...

CVE-2026-105055 WordPress WP Mailster plugin <= 1.9.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Mailster WP Mailster wp-mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: from n/a through 1.9.0.0...

EUVD-2026-92312

Missing Authorization vulnerability in WP Mailster WP Mailster wp-mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: from n/a through 1.9.0.0...

CVE-2026-105055 WordPress WP Mailster plugin <= 1.9.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Mailster WP Mailster wp-mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: from n/a through 1.9.0.0...

CVE-2026-97071 WordPress CURCY plugin <= 2.2.17 - Broken Access Control vulnerability

Incorrect Calculation vulnerability in VillaTheme CURCY woo-multi-currency allows Integer Attacks.This issue affects CURCY: from n/a through 2.2.17...

CVE-2026-97071 WordPress CURCY plugin <= 2.2.17 - Broken Access Control vulnerability

Incorrect Calculation vulnerability in VillaTheme CURCY woo-multi-currency allows Integer Attacks.This issue affects CURCY: from n/a through 2.2.17...

CVE-2026-97071

The VillaTheme CURCY (woo-multi-currency) WordPress plugin versions up to and including 2.2.17 is vulnerable to an Incorrect Calculation vulnerability (CWE-682). This flaw allows for Integer Attacks , potentially impacting the integrity of data during currency calculations. No specific exploitati...

WordPress WP Mailster plugin <= 1.9.0.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ratchanon Chamnankit in WordPress Plugin WP Mailster versions = 1.9.0.0...

WordPress CURCY plugin <= 2.2.17 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by dcs in WordPress Plugin CURCY versions = 2.2.17...

EUVD-2026-92309

Missing Authorization vulnerability in Brandtoss WP Admin Audit wp-admin-audit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Admin Audit: from n/a through 1.2.17...

CVE-2026-105062 WordPress WP Admin Audit plugin <= 1.2.17 - Broken Access Control vulnerability

Missing Authorization vulnerability in Brandtoss WP Admin Audit wp-admin-audit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Admin Audit: from n/a through 1.2.17...

CVE-2026-105062

The Brandtoss WP Admin Audit plugin for WordPress (versions n/a through 1.2.17 ) is vulnerable to a Missing Authorization vulnerability (CWE-862). This issue allows for exploiting incorrectly configured access control security levels . The impact is categorized as Medium severity with a CVSS3.1 s...

CVE-2026-105062 WordPress WP Admin Audit plugin <= 1.2.17 - Broken Access Control vulnerability

Missing Authorization vulnerability in Brandtoss WP Admin Audit wp-admin-audit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Admin Audit: from n/a through 1.2.17...

CVE-2026-103078

The WordPress JS Help Desk plugin (specifically the js-support-ticket component) is vulnerable to an Insecure Direct Object Reference (IDOR) flaw, identified as CWE-639 . This vulnerability allows for an Authorization Bypass due to incorrectly configured access control security levels, enabling a...

EUVD-2026-92308

Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through 4.0.0...