EUVD-2026-94959

Missing Authorization vulnerability in Creator LMS Creator LMS creatorlms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Creator LMS: from n/a through 1.2.21...

CVE-2026-62128

The Creator LMS WordPress plugin (versions up to and including 1.2.21 ) is susceptible to a Missing Authorization vulnerability (CWE-862). This flaw allows for Exploiting Incorrectly Configured Access Control Security Levels . The vulnerability has a CVSS 3.1 base score of 5.3 (Medium) , with an ...

WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Matthew Lapinski in WordPress Plugin Event Tickets versions = 5.30.0.1...

EUVD-2026-94951

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...

CVE-2026-105891

The Liquid Web / StellarWP Event Tickets plugin (event-tickets) is affected by a Missing Authorization vulnerability in versions up to and including 5.30.0.1 . This issue allows for the exploitation of incorrectly configured access control security levels , potentially leading to unauthorized act...

EUVD-2026-94950

Missing Authorization vulnerability in VillaTheme VillaTheme Core villatheme-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VillaTheme Core: from n/a through 1.0.5...

CVE-2026-103072

The VillaTheme VillaTheme Core (villatheme-core) WordPress plugin is vulnerable to a Missing Authorization vulnerability (CWE-862) in versions up to and including 1.0.5 . This flaw allows for Exploiting Incorrectly Configured Access Control Security Levels . The impact is characterized as a mediu...

CVE-2026-103072 WordPress VillaTheme Core plugin <= 1.0.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in VillaTheme VillaTheme Core villatheme-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VillaTheme Core: from n/a through 1.0.5...

WordPress VillaTheme Core plugin <= 1.0.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Erik Debye in WordPress Plugin VillaTheme Core versions = 1.0.5...

EUVD-2026-94948

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...

CVE-2026-105888

The Liquid Web / StellarWP Event Tickets WordPress plugin (versions

CVE-2026-105888 WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...

WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Erik Debye in WordPress Plugin Event Tickets versions = 5.30.0.1...

CVE-2020-24029

CVE-2020-24029 Description Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request. Important Dates Announcement to Vendor: 2020-07-12 Public disclosure date: 2020-08-31 Vulnerability Type Incorrect...

CVE-2019-19550

CVE-2019-19550 Description Remote Authentication Bypass in Senior Rubiweb 6.2.34.28 and 6.2.34.37 allows admin access to sensitive information of affected users using vulnerable versions. The attacker only needs to provide the correct URL. Important Dates Announcement to Vendor: 2019-12-02 Public...

EUVD-2026-94946

Missing Authorization vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Visual Composer Website Builder: from n/a through 45.16.3...

CVE-2026-106596

The Visual Composer Website Builder WordPress plugin (versions

CVE-2026-106596 WordPress Visual Composer Website Builder plugin <= 45.16.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Visual Composer Website Builder: from n/a through 45.16.3...

WordPress Visual Composer Website Builder plugin <= 45.16.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Aarush Gaur in WordPress Plugin Visual Composer Website Builder versions = 45.16.3...

commvault-cve2025-34028-check

infra-monitor infra-monitor is a lightweight Nmap NSE script for silently testing response consistency across web infrastructure routes. It helps detect anomalies in access control, configuration discrepancies, or potential inconsistencies in how different endpoints respond. This tool is designed...