223897 matches found
CVE-2026-66477 WordPress Gillion theme <= 4.13 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Gillion = 4.13 versions...
CVE-2026-66442 WordPress YayPricing plugin <= 3.5.6 - Broken Access Control vulnerability
Subscriber Broken Access Control in YayPricing = 3.5.6 versions...
CVE-2026-66442
CVE-2026-66442 concerns the WordPress plugin YayPricing <= 3.5.6 , reported as Broken Access Control . The CVE record cites a network-based issue with low persistence of impact: confidentiality = none, integrity = low, availability = low; privileges required = low, user interaction = none. No ...
CVE-2026-66442
Subscriber Broken Access Control in YayPricing = 3.5.6 versions...
EUVD-2026-49246
Subscriber Broken Access Control in YayPricing = 3.5.6 versions...
CVE-2026-65568
Contributor Broken Access Control in Visual Composer Website Builder = 45.15.0 versions...
CVE-2026-65567
Unauthenticated Broken Access Control in Event Tickets = 5.29.0.1 versions...
EUVD-2026-49238
Unauthenticated Broken Access Control in Event Tickets = 5.29.0.1 versions...
CVE-2026-65567
The vulnerability concerns the WordPress Event Tickets plugin for WordPress, affected in versions ≤ 5.29.0.1. It is described as an Unauthenticated Broken Access Control flaw, meaning unauthenticated users can access restricted functionality or data. The CVE-2026-65567 entry confirms the issue wi...
CVE-2026-65568 WordPress Visual Composer Website Builder plugin <= 45.15.0 - Broken Access Control vulnerability
Contributor Broken Access Control in Visual Composer Website Builder = 45.15.0 versions...
EUVD-2026-49239
Contributor Broken Access Control in Visual Composer Website Builder = 45.15.0 versions...
CVE-2026-65568
The CVE-2026-65568 entry concerns the WordPress Visual Composer Website Builder plugin (versions
EUVD-2026-49230
Unauthenticated Broken Access Control in Thrive Leads Version = 10.9.2 versions...
CVE-2026-65435
Unauthenticated Broken Access Control in Thrive Leads Version = 10.9.2 versions...
CVE-2026-65435
The CVE-2026-65435 entry concerns the WordPress Thrive Leads plugin (versions <= 10.9.2) with an Unauthenticated Broken Access Control vulnerability. The affected component is Thrive Leads Version
CVE-2026-65435 WordPress Thrive Leads Version plugin <= 10.9.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Thrive Leads Version = 10.9.2 versions...
CVE-2026-65433 WordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Broken Access Control vulnerability
Subscriber Broken Access Control in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg = 1.5.1 versions...
EUVD-2026-49228
Subscriber Broken Access Control in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg = 1.5.1 versions...