263384 matches found
CVE-2026-105891 WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...
CVE-2026-103072
The VillaTheme VillaTheme Core (villatheme-core) WordPress plugin is vulnerable to a Missing Authorization vulnerability (CWE-862) in versions up to and including 1.0.5 . This flaw allows for Exploiting Incorrectly Configured Access Control Security Levels . The impact is characterized as a mediu...
CVE-2026-103072 WordPress VillaTheme Core plugin <= 1.0.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in VillaTheme VillaTheme Core villatheme-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VillaTheme Core: from n/a through 1.0.5...
EUVD-2026-94950
Missing Authorization vulnerability in VillaTheme VillaTheme Core villatheme-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VillaTheme Core: from n/a through 1.0.5...
WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by dzeusking in WordPress Plugin Event Tickets versions = 5.30.0.1...
CVE-2026-105888
The Liquid Web / StellarWP Event Tickets WordPress plugin (versions
WordPress VillaTheme Core plugin <= 1.0.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Erik Debye in WordPress Plugin VillaTheme Core versions = 1.0.5...
EUVD-2026-94948
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...
CVE-2026-105888 WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...
WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Erik Debye in WordPress Plugin Event Tickets versions = 5.30.0.1...
CVE-2020-24029
CVE-2020-24029 Description Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request. Important Dates Announcement to Vendor: 2020-07-12 Public disclosure date: 2020-08-31 Vulnerability Type Incorrect...
CVE-2019-19550
CVE-2019-19550 Descripción Omisión de autenticación remota en Senior Rubiweb 6.2.34.28 y 6.2.34.37 permite el acceso de administrador a información sensible de los usuarios afectados utilizando versiones vulnerables. El atacante solo necesita proporcionar la URL correcta. Fechas importantes Anunc...
CVE-2026-106596
The Visual Composer Website Builder WordPress plugin (versions
CVE-2026-106596 WordPress Visual Composer Website Builder plugin <= 45.16.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Visual Composer Website Builder: from n/a through 45.16.3...
EUVD-2026-94946
Missing Authorization vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Visual Composer Website Builder: from n/a through 45.16.3...
WordPress Visual Composer Website Builder plugin <= 45.16.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Aarush Gaur in WordPress Plugin Visual Composer Website Builder versions = 45.16.3...
commvault-cve2025-34028-check
infra-monitor infra-monitor is a lightweight Nmap NSE script for silently testing response consistency across web infrastructure routes. It helps detect anomalies in access control, configuration discrepancies, or potential inconsistencies in how different endpoints respond. This tool is designed...
CVE-2026-105886
The BdThemes Ultimate Post Kit WordPress plugin (versions up to and including 4.5.5 ) is vulnerable to a Missing Authorization vulnerability (CWE-862). This flaw allows for the exploitation of incorrectly configured access control security levels . The vulnerability results in a medium severity r...
EUVD-2026-94943
Missing Authorization vulnerability in BdThemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Post Kit: from n/a through 4.5.5...
CVE-2026-105886 WordPress Ultimate Post Kit plugin <= 4.5.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in BdThemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Post Kit: from n/a through 4.5.5...