PT-2026-49506

Unauthenticated Broken Access Control in Knit Pay = 9.4.0.0 versions...

PT-2026-49322

Incorrect access control in the impworks Bonsai v6.0 allows authenticated attackers with Editor privileges to escalate privileges to Administrator and execute unauthorized account, password, and configuration changes...

PT-2026-49362

Unauthenticated Broken Access Control in Simple Membership = 4.7.1 versions...

PT-2026-49349

Subscriber Broken Access Control in bunny.net = 2.3.6 versions...

PT-2026-49325

Incorrect access control in statping-ng v0.93.0 allows attackers to escalate privileges to Administrator and access sensitive components...

PT-2026-49457

Unauthenticated Broken Access Control in Salon booking system = 10.30.25 versions...

PT-2026-49396

Unauthenticated Broken Access Control in Masteriyo - LMS = 2.1.5 versions...

PT-2026-49402

Subscriber Broken Access Control in RepairBuddy = 4.1132 versions...

PT-2026-49412

Unauthenticated Broken Access Control in wpForo Forum 3.0.2 versions...

PT-2026-49391

Unauthenticated Broken Access Control in Easy Appointments = 3.12.21 versions...

PT-2026-49426

Subscriber Broken Access Control in ChatBot = 7.9.7 versions...

PT-2026-49408

Unauthenticated Broken Access Control in Redsys for WooCommerce Light = 7.0.0 versions...

PT-2026-49431

Subscriber Broken Access Control in myCred = 3.0.3 versions...

PT-2026-49316

Incorrect access control in the /form/webhooks/webhook endpoint of Deck9 Input v2.0.1 allows authenticated attackers to arbitrarily modify or delete another tenant's webhook via a crafted request...

PT-2026-49418

Unauthenticated Broken Access Control in Booking Package = 1.7.06 versions...

PT-2026-49288

A Time-Based Blind SQL Injection vulnerability in the alias management module of OpenSIPS Control Panel opensips-cp prior to version 9.3.3 allows authenticated attackers to execute arbitrary SQL commands via the 'table' GET parameter in alias management.php...

PT-2026-49445

Subscriber Broken Access Control in Classified Listing = 5.3.9 versions...

PT-2026-49430

Subscriber Broken Access Control in Groundhogg 4.4.1 versions...

PT-2026-49488

Unauthenticated Broken Access Control in WPC Product Bundles for WooCommerce = 8.5.3 versions...

PT-2026-49405

Subscriber Broken Access Control in Ultra Addons for WPForms = 1.0.11 versions...