263375 matches found
CVE-2026-62128
The Creator LMS WordPress plugin (versions up to and including 1.2.21 ) is susceptible to a Missing Authorization vulnerability (CWE-862). This flaw allows for Exploiting Incorrectly Configured Access Control Security Levels . The vulnerability has a CVSS 3.1 base score of 5.3 (Medium) , with an ...
CVE-2026-62128 WordPress Creator LMS plugin <= 1.2.21 - Broken Access Control vulnerability
Missing Authorization vulnerability in Creator LMS Creator LMS creatorlms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Creator LMS: from n/a through 1.2.21...
EUVD-2026-94959
Missing Authorization vulnerability in Creator LMS Creator LMS creatorlms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Creator LMS: from n/a through 1.2.21...
WordPress Creator LMS plugin <= 1.2.21 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin Creator LMS versions = 1.2.21...
WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Matthew Lapinski in WordPress Plugin Event Tickets versions = 5.30.0.1...
CVE-2026-105891
The Liquid Web / StellarWP Event Tickets plugin (event-tickets) is affected by a Missing Authorization vulnerability in versions up to and including 5.30.0.1 . This issue allows for the exploitation of incorrectly configured access control security levels , potentially leading to unauthorized act...
CVE-2026-105891 WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...
EUVD-2026-94951
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...
CVE-2026-103072 WordPress VillaTheme Core plugin <= 1.0.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in VillaTheme VillaTheme Core villatheme-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VillaTheme Core: from n/a through 1.0.5...
EUVD-2026-94950
Missing Authorization vulnerability in VillaTheme VillaTheme Core villatheme-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VillaTheme Core: from n/a through 1.0.5...
CVE-2026-103072
The VillaTheme VillaTheme Core (villatheme-core) WordPress plugin is vulnerable to a Missing Authorization vulnerability (CWE-862) in versions up to and including 1.0.5 . This flaw allows for Exploiting Incorrectly Configured Access Control Security Levels . The impact is characterized as a mediu...
WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by dzeusking in WordPress Plugin Event Tickets versions = 5.30.0.1...
EUVD-2026-94948
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...
CVE-2026-105888 WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...
WordPress VillaTheme Core plugin <= 1.0.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Erik Debye in WordPress Plugin VillaTheme Core versions = 1.0.5...
CVE-2026-105888
The Liquid Web / StellarWP Event Tickets WordPress plugin (versions
WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Erik Debye in WordPress Plugin Event Tickets versions = 5.30.0.1...
CVE-2020-24029
CVE-2020-24029 描述 由于ForLogic Qualiex v1和v3中未经验证的密码更改，攻击者可以通过一个简单的请求访问客户和管理员的权限及数据。 重要日期 通知供应商：2020-07-12 公开披露日期：2020-08-31 漏洞类型 不正确的访问控制 产品供应商 ForLogic 受影响的产品代码库 Qualiex - v1 Qualiex - v3 其他版本也可能受影响，特别是同系列版本（尚未测试） 受影响组件 Qualiex 攻击类型 远程 权限升级影响 是 信息泄露影响 是 攻击向量 未经验证的密码更改公开可用，无需特殊要求（仅需正确的请求）...
CVE-2019-19550
CVE-2019-19550 描述 Senior Rubiweb 6.2.34.28 和 6.2.34.37 中的远程认证绕过漏洞允许管理员访问受影响用户的敏感信息。攻击者只需提供正确的URL即可。 重要日期 通知供应商日期：2019-12-02 公开披露日期：2020-01-30 漏洞类型 不正确的访问控制 产品供应商 Senior 受影响产品代码库 Rubiweb - 6.2.34.37 Rubiweb - 6.2.34.28 其他版本可能受影响，尤其是同一系列（尚未测试） 受影响组件 Rubiweb 攻击类型 远程 影响信息披露 True 攻击向量...