CVE-2026-96818 WordPress WP Express Checkout (Accept PayPal Payments) plugin <= 2.4.9 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in WP Express Checkout Accept PayPal Payments = 2.4.9 versions...

EUVD-2026-89871

Unauthenticated Broken Access Control in WP Express Checkout Accept PayPal Payments = 2.4.9 versions...

CVE-2026-96817

The MakeCommerce for WooCommerce WordPress plugin (versions

CVE-2026-96817 WordPress MakeCommerce for WooCommerce plugin <= 4.1.0 - Broken Access Control vulnerability

Subscriber Broken Access Control in MakeCommerce for WooCommerce = 4.1.0 versions...

CVE-2026-96817 WordPress MakeCommerce for WooCommerce plugin <= 4.1.0 - Broken Access Control vulnerability

Subscriber Broken Access Control in MakeCommerce for WooCommerce = 4.1.0 versions...

EUVD-2026-89870

Subscriber Broken Access Control in MakeCommerce for WooCommerce = 4.1.0 versions...

CVE-2026-96348 WordPress Bookly plugin <= 28.2 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Bookly = 28.2 versions...

CVE-2026-96348

The Bookly WordPress plugin (versions

CVE-2026-96348 WordPress Bookly plugin <= 28.2 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Bookly = 28.2 versions...

EUVD-2026-89861

Unauthenticated Broken Access Control in Bookly = 28.2 versions...

CVE-2026-95587 WordPress Hostinger Migrator plugin <= 1.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Hostinger Migrator = 1.0 versions...

CVE-2026-95587

The WordPress Hostinger Migrator plugin (version

CVE-2026-95587 WordPress Hostinger Migrator plugin <= 1.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Hostinger Migrator = 1.0 versions...

EUVD-2026-89854

Unauthenticated Broken Access Control in Hostinger Migrator = 1.0 versions...

CVE-2026-94499 WordPress FormGent plugin <= 1.12.2 - Broken Access Control vulnerability

Subscriber Broken Access Control in FormGent = 1.12.2 versions...

CVE-2026-94499

The FormGent WordPress plugin (versions ≤ 1.12.2 ) contains a Broken Access Control vulnerability affecting Subscriber accounts. The provided documents do not specify the exact technical root cause, specific files, or remediation steps. No exploits or in-the-wild exploitation details are provided.

CVE-2026-94499 WordPress FormGent plugin <= 1.12.2 - Broken Access Control vulnerability

Subscriber Broken Access Control in FormGent = 1.12.2 versions...

EUVD-2026-89845

Subscriber Broken Access Control in FormGent = 1.12.2 versions...

CVE-2026-94120 WordPress GravityExport Lite for Gravity Forms plugin <= 2.7.2 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms = 2.7.2 versions...

EUVD-2026-89837

Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms = 2.7.2 versions...