CVE-2026-97247 WordPress Blocksy Companion plugin <= 2.1.55 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Blocksy Companion = 2.1.55 versions...

EUVD-2026-89911

Unauthenticated Broken Access Control in Blocksy Companion = 2.1.55 versions...

CVE-2026-97247

The Blocksy Companion WordPress plugin in versions

CVE-2026-97243 WordPress AllAble Connector plugin <= 0.13.4 - Broken Access Control vulnerability

Subscriber Broken Access Control in AllAble Connector = 0.13.4 versions...

EUVD-2026-89907

Subscriber Broken Access Control in AllAble Connector = 0.13.4 versions...

CVE-2026-97243 WordPress AllAble Connector plugin <= 0.13.4 - Broken Access Control vulnerability

Subscriber Broken Access Control in AllAble Connector = 0.13.4 versions...

CVE-2026-97243

The AllAble Connector WordPress plugin, in versions

CVE-2026-97239

The WordPress MCP Content Manager Lite plugin (versions

CVE-2026-97239 WordPress MCP Content Manager Lite plugin <= 1.1.0 - Broken Access Control vulnerability

Subscriber Broken Access Control in MCP Content Manager Lite = 1.1.0 versions...

CVE-2026-97239 WordPress MCP Content Manager Lite plugin <= 1.1.0 - Broken Access Control vulnerability

Subscriber Broken Access Control in MCP Content Manager Lite = 1.1.0 versions...

EUVD-2026-89903

Subscriber Broken Access Control in MCP Content Manager Lite = 1.1.0 versions...

CVE-2026-97197

The WordPress Backup & Migration plugin versions

CVE-2026-97197 WordPress WordPress Backup & Migration plugin <= 1.6.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in WordPress Backup & Migration = 1.6.0 versions...

CVE-2026-97197 WordPress WordPress Backup & Migration plugin <= 1.6.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in WordPress Backup & Migration = 1.6.0 versions...

EUVD-2026-89898

Unauthenticated Broken Access Control in WordPress Backup & Migration = 1.6.0 versions...

CVE-2026-103012

A flaw was found in claude-code. When retrieving server-managed settings, the application prioritized a locally stored credential over an active organizational account sign-in. If the configuration server rejected the stored credential, a local user could initiate a session that bypasses the...

EUVD-2026-89871

Unauthenticated Broken Access Control in WP Express Checkout Accept PayPal Payments = 2.4.9 versions...

CVE-2026-96818

The WP Express Checkout (Accept PayPal Payments) plugin for WordPress is affected by an unauthenticated Broken Access Control vulnerability in versions

CVE-2026-96818 WordPress WP Express Checkout (Accept PayPal Payments) plugin <= 2.4.9 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in WP Express Checkout Accept PayPal Payments = 2.4.9 versions...

CVE-2026-96818 WordPress WP Express Checkout (Accept PayPal Payments) plugin <= 2.4.9 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in WP Express Checkout Accept PayPal Payments = 2.4.9 versions...