2763 matches found
CVE-2026-81802
WpEvently (WordPress plugin, also listed as Mage EventPress) versions ≤ 5.6.0 contain an unauthenticated Insecure Direct Object Reference (IDOR) vulnerability. The CVSS 3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L, indicating a network-exploitable issue requiring...
CVE-2026-81802 WordPress WpEvently plugin <= 5.6.0 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References IDOR in WpEvently = 5.6.0 versions...
EUVD-2026-72645
Unauthenticated Insecure Direct Object References IDOR in WpEvently = 5.6.0 versions...
cve-2026-29204-whmcs-clientarea-addonid
CVE-2026-29204 — Guardia de complemento del área de cliente de WHMCS Notas no oficiales de la comunidad para CVE-2026-29204: en clientarea.php?action=productdetails, un cliente autenticado puede proporcionar un addonId externo con modop=custom y acceder al contexto del módulo que no pertenece a l...
CVE-2026-12400-Exploit
CVE-2026-12400 — FlowForms IDOR: Modificación no autorizada de formularios Referencia directa insegura a objetos autenticada Colaborador+ para modificación arbitraria de formularios en FlowForms ≤ 1.1.1 Resumen de la vulnerabilidad...
PT-2026-86991
Unauthenticated Insecure Direct Object References IDOR in WpEvently = 5.6.0 versions...
CVE-2026-86488
In JetBrains YouTrack before 2026.2.18634 iDOR via the watchRules and issueListConfig endpoints exposed private saved searches...
CVE-2026-86489
In JetBrains YouTrack before 2026.2.18634 an IDOR in the user profile API disclosed private issues and starred folders across organizations...
CVE-2026-86479
In JetBrains YouTrack before 2026.2.18788, 2026.1.14055, 2025.3.161254 missing authorisation allowed access to restricted REST API resources via IDOR...
CVE-2026-86489
In JetBrains YouTrack before 2026.2.18634 an IDOR in the user profile API disclosed private issues and starred folders across organizations...
EUVD-2026-72505
In JetBrains YouTrack before 2026.2.18634 an IDOR in the user profile API disclosed private issues and starred folders across organizations...
CVE-2026-86489
In JetBrains YouTrack before 2026.2.18634 an IDOR in the user profile API disclosed private issues and starred folders across organizations...
CVE-2026-86488
In JetBrains YouTrack before 2026.2.18634 iDOR via the watchRules and issueListConfig endpoints exposed private saved searches...
EUVD-2026-72504
In JetBrains YouTrack before 2026.2.18634 iDOR via the watchRules and issueListConfig endpoints exposed private saved searches...
CVE-2026-86488
In JetBrains YouTrack before 2026.2.18634 iDOR via the watchRules and issueListConfig endpoints exposed private saved searches...
CVE-2026-86488
JetBrains YouTrack prior to version 2026.2.18634 contains an Insecure Direct Object Reference (iDOR) vulnerability in the watchRules and issueListConfig endpoints, allowing a low-privileged authenticated user to access private saved searches belonging to other users. The CNA-assigned CVSS 3.1 sco...
EUVD-2026-72495
In JetBrains YouTrack before 2026.2.18788, 2026.1.14055, 2025.3.161254 missing authorisation allowed access to restricted REST API resources via IDOR...
CVE-2026-86479
JetBrains YouTrack versions prior to 2026.2.18788, 2026.1.14055, and 2025.3.161254 are affected by a missing authorisation vulnerability that allows unauthorised access to restricted REST API resources via an IDOR (Insecure Direct Object Reference) flaw. An attacker with low-level privileges (e.g...