265778 matches found
CVE-2026-97280 WordPress Review Schema plugin 3.1.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Mamunur Rashid Review Schema review-schema allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Review Schema: 3.1.0...
Security Bulletin: IBM WebSphere Application Server Liberty prior to 26.0.0.9 is affected by multiple vulnerabilities
Summary IBM WebSphere Application Server Liberty prior to 26.0.0.9 is affected by multiple vulnerabilities. Vulnerability Details CVEID:CVE-2026-10841 DESCRIPTION: IBM WebSphere Application Server 8.5, 9.0, and Liberty are vulnerable to HTTP request smuggling. CWE:CWE-444: Inconsistent...
EUVD-2026-90841
Subscriber Broken Access Control in Gratisfaction = 4.6.3 versions...
CVE-2026-97297 WordPress Gratisfaction plugin <= 4.6.3 - Broken Access Control vulnerability
Subscriber Broken Access Control in Gratisfaction = 4.6.3 versions...
CVE-2026-97297
The Gratisfaction WordPress plugin (versions
CVE-2026-97297 WordPress Gratisfaction plugin <= 4.6.3 - Broken Access Control vulnerability
Subscriber Broken Access Control in Gratisfaction = 4.6.3 versions...
CVE-2026-97281 WordPress WP Project Manager plugin <= 4.0.7 - Broken Access Control vulnerability
Subscriber Broken Access Control in WP Project Manager = 4.0.7 versions...
CVE-2026-97281 WordPress WP Project Manager plugin <= 4.0.7 - Broken Access Control vulnerability
Subscriber Broken Access Control in WP Project Manager = 4.0.7 versions...
EUVD-2026-90839
Subscriber Broken Access Control in WP Project Manager = 4.0.7 versions...
CVE-2026-97281
The WP Project Manager plugin for WordPress (versions
CVE-2026-97277 WordPress Social Boost plugin <= 3.6.2 - Broken Access Control vulnerability
Subscriber Broken Access Control in Social Boost = 3.6.2 versions...
EUVD-2026-90838
Subscriber Broken Access Control in Social Boost = 3.6.2 versions...
CVE-2026-97277 WordPress Social Boost plugin <= 3.6.2 - Broken Access Control vulnerability
Subscriber Broken Access Control in Social Boost = 3.6.2 versions...
CVE-2026-97277
The Social Boost WordPress plugin, versions 3.6.2 and below , is affected by a Broken Access Control vulnerability (CWE-862) involving subscriber privileges. This flaw allows for unauthorized actions due to insufficient access control checks. The vulnerability has a High severity rating with a CV...
CVE-2026-97258 WordPress Aruba Migration Tool plugin <= 1.0.4 - Broken Access Control vulnerability
Subscriber Broken Access Control in Aruba Migration Tool = 1.0.4 versions...
EUVD-2026-90857
Subscriber Broken Access Control in Aruba Migration Tool = 1.0.4 versions...
CVE-2026-97258
The WordPress Aruba Migration Tool plugin (versions
CVE-2026-97258 WordPress Aruba Migration Tool plugin <= 1.0.4 - Broken Access Control vulnerability
Subscriber Broken Access Control in Aruba Migration Tool = 1.0.4 versions...