277906 matches found
CVE-2026-95602
The YITH WooCommerce Request A Quote WordPress plugin is vulnerable to an Insecure Direct Object Reference (IDOR) flaw in versions prior to 4.46.1 . The root cause is an Authorization Bypass where incorrectly configured access control security levels allow for exploitation via user-controlled key...
CVE-2026-95527 WordPress Conekta Payment Gateway plugin <= 6.2.4 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Conekta Payment Gateway = 6.2.4 versions...
EUVD-2026-85495
Unauthenticated Broken Access Control in Conekta Payment Gateway = 6.2.4 versions...
CVE-2026-95527
The Conekta Payment Gateway WordPress plugin, versions
CVE-2026-95527 WordPress Conekta Payment Gateway plugin <= 6.2.4 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Conekta Payment Gateway = 6.2.4 versions...
CVE-2026-95513
The Online Booking & Scheduling Calendar for WordPress by vcita plugin, affecting versions
CVE-2026-95513 WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.6.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Online Booking & Scheduling Calendar for WordPress by vcita = 4.6.0 versions...
CVE-2026-95513 WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.6.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Online Booking & Scheduling Calendar for WordPress by vcita = 4.6.0 versions...
EUVD-2026-85488
Unauthenticated Broken Access Control in Online Booking & Scheduling Calendar for WordPress by vcita = 4.6.0 versions...
CVE-2026-94679 WordPress Fluent Support plugin <= 2.3.2 - Broken Access Control vulnerability
Subscriber Broken Access Control in Fluent Support = 2.3.2 versions...
CVE-2026-94679
The Fluent Support WordPress plugin, version 2.3.2 and below , is affected by a Broken Access Control vulnerability. This flaw allows for unauthorized actions within the subscriber context. No specific technical root cause, practical consequences, or remediation steps are provided in the availabl...
EUVD-2026-85484
Subscriber Broken Access Control in Fluent Support = 2.3.2 versions...
CVE-2026-94498 WordPress AppMySite plugin <= 3.15.4 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in AppMySite = 3.15.4 versions...
CVE-2026-94498 WordPress AppMySite plugin <= 3.15.4 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in AppMySite = 3.15.4 versions...
EUVD-2026-85481
Unauthenticated Broken Access Control in AppMySite = 3.15.4 versions...
CVE-2026-94498
The AppMySite WordPress plugin (versions
CVE-2026-94080
Versions of the MarketKing WordPress plugin up to and including 2.1.70 are susceptible to an unauthenticated broken access control vulnerability. The vulnerability allows an attacker to perform actions without proper authorization. No specific root cause, practical impact details, or remediation ...
EUVD-2026-85470
Unauthenticated Broken Access Control in MarketKing = 2.1.70 versions...