Lucene search
+L

263384 matches found

Cvelist
Cvelist
•added 2026/10/08 1:03 p.m.•38 views

CVE-2026-105891 WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...

4.3CVSS0.00201EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/08 1:03 p.m.•11 views

CVE-2026-103072

The VillaTheme VillaTheme Core (villatheme-core) WordPress plugin is vulnerable to a Missing Authorization vulnerability (CWE-862) in versions up to and including 1.0.5 . This flaw allows for Exploiting Incorrectly Configured Access Control Security Levels . The impact is characterized as a mediu...

4.3CVSS6AI score0.00197EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/08 1:03 p.m.•37 views

CVE-2026-103072 WordPress VillaTheme Core plugin <= 1.0.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in VillaTheme VillaTheme Core villatheme-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VillaTheme Core: from n/a through 1.0.5...

4.3CVSS0.00197EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/08 1:03 p.m.•8 views

EUVD-2026-94950

Missing Authorization vulnerability in VillaTheme VillaTheme Core villatheme-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VillaTheme Core: from n/a through 1.0.5...

4.3CVSS6AI score0.00197EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/08 1:03 p.m.•5 views

WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by dzeusking in WordPress Plugin Event Tickets versions = 5.30.0.1...

4.3CVSS5.8AI score0.00201EPSS
SaveExploits0Affected Software1
CVE
CVE
•added 2026/10/08 1:02 p.m.•7 views

CVE-2026-105888

The Liquid Web / StellarWP Event Tickets WordPress plugin (versions

5.4CVSS6AI score0.00182EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/08 1:02 p.m.•6 views

WordPress VillaTheme Core plugin <= 1.0.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Erik Debye in WordPress Plugin VillaTheme Core versions = 1.0.5...

4.3CVSS5.8AI score0.00197EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2026/10/08 1:02 p.m.•8 views

EUVD-2026-94948

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...

5.4CVSS6AI score0.00182EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/08 1:02 p.m.•39 views

CVE-2026-105888 WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...

5.4CVSS0.00182EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/08 1:01 p.m.•7 views

WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Erik Debye in WordPress Plugin Event Tickets versions = 5.30.0.1...

5.4CVSS5.8AI score0.00182EPSS
SaveExploits0Affected Software1
Kitploit
Kitploit
•added 2026/10/08 1:00 p.m.•14 views

CVE-2020-24029

CVE-2020-24029 Description Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request. Important Dates Announcement to Vendor: 2020-07-12 Public disclosure date: 2020-08-31 Vulnerability Type Incorrect...

9.8CVSS8.3AI score0.01974EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/08 1:00 p.m.•18 views

CVE-2019-19550

CVE-2019-19550 Descripción Omisión de autenticación remota en Senior Rubiweb 6.2.34.28 y 6.2.34.37 permite el acceso de administrador a información sensible de los usuarios afectados utilizando versiones vulnerables. El atacante solo necesita proporcionar la URL correcta. Fechas importantes Anunc...

7.5CVSS7.5AI score0.01933EPSS
SaveExploits3
CVE
CVE
•added 2026/10/08 1:00 p.m.•8 views

CVE-2026-106596

The Visual Composer Website Builder WordPress plugin (versions

5.3CVSS6AI score0.00248EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/08 1:00 p.m.•37 views

CVE-2026-106596 WordPress Visual Composer Website Builder plugin <= 45.16.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Visual Composer Website Builder: from n/a through 45.16.3...

5.3CVSS0.00248EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/08 1:00 p.m.•7 views

EUVD-2026-94946

Missing Authorization vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Visual Composer Website Builder: from n/a through 45.16.3...

5.3CVSS6AI score0.00248EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/08 1:00 p.m.•7 views

WordPress Visual Composer Website Builder plugin <= 45.16.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Aarush Gaur in WordPress Plugin Visual Composer Website Builder versions = 45.16.3...

5.3CVSS5.8AI score0.00248EPSS
SaveExploits0Affected Software1
Kitploit
Kitploit
•added 2026/10/08 12:58 p.m.•22 views

commvault-cve2025-34028-check

infra-monitor infra-monitor is a lightweight Nmap NSE script for silently testing response consistency across web infrastructure routes. It helps detect anomalies in access control, configuration discrepancies, or potential inconsistencies in how different endpoints respond. This tool is designed...

6.2AI score
SaveExploits0
CVE
CVE
•added 2026/10/08 12:57 p.m.•6 views

CVE-2026-105886

The BdThemes Ultimate Post Kit WordPress plugin (versions up to and including 4.5.5 ) is vulnerable to a Missing Authorization vulnerability (CWE-862). This flaw allows for the exploitation of incorrectly configured access control security levels . The vulnerability results in a medium severity r...

6.5CVSS6AI score0.00248EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/08 12:57 p.m.•5 views

EUVD-2026-94943

Missing Authorization vulnerability in BdThemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Post Kit: from n/a through 4.5.5...

6.5CVSS6AI score0.00248EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/08 12:57 p.m.•35 views

CVE-2026-105886 WordPress Ultimate Post Kit plugin <= 4.5.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in BdThemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Post Kit: from n/a through 4.5.5...

6.5CVSS0.00248EPSS
SaveExploits0References1
Rows per page
Query Builder