798 matches found
CVE-2026-120834 WordPress WP2LEADS plugin <= 3.5.17 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in Tobias WP2LEADS wp2leads allows Privilege Escalation.This issue affects WP2LEADS: from n/a through 3.5.17...
EUVD-2026-120118
Incorrect Privilege Assignment vulnerability in AtlasAiDev MCP Server for WordPress ai-workflow-automation-ai-agent-hub allows Privilege Escalation.This issue affects MCP Server for WordPress: from n/a through 2.0.1...
CVE-2026-119514: Webful Creations RepairBuddy: Incorrect Privilege Assignment vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Privilege…
Incorrect Privilege Assignment vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Privilege Escalation.This issue affects RepairBuddy: from n/a through 4.1234...
CVE-2026-120834: Tobias WP2LEADS: Incorrect Privilege Assignment vulnerability in Tobias WP2LEADS wp2leads allows Privilege Escalation.This issue affects…
Incorrect Privilege Assignment vulnerability in Tobias WP2LEADS wp2leads allows Privilege Escalation.This issue affects WP2LEADS: from n/a through 3.5.17...
PT-2026-140336
Incorrect Privilege Assignment vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Privilege Escalation.This issue affects RepairBuddy: from n/a through 4.1234...
CVE-2026-109900
The Melapress Role Editor WordPress plugin (versions up to and including 1.3.0 ) is susceptible to an Incorrect Privilege Assignment vulnerability (CWE-266). This flaw allows for Privilege Escalation , potentially enabling an attacker to gain unauthorized access or permissions. Specific details r...
CVE-2026-109900: Melapress Melapress Role Editor: Incorrect Privilege Assignment vulnerability in Melapress Melapress Role Editor melapress-role-editor allows Privilege…
Incorrect Privilege Assignment vulnerability in Melapress Melapress Role Editor melapress-role-editor allows Privilege Escalation.This issue affects Melapress Role Editor: from n/a through 1.3.0...
CVE-2026-120844
Incorrect Privilege Assignment vulnerability in miniOrange OAuth Single Sign On – SSO OAuth Client miniorange-login-with-eve-online-google-facebook allows Privilege Escalation.This issue affects OAuth Single Sign On – SSO OAuth Client: from n/a through 7.1.3...
EUVD-2026-117997
Incorrect Privilege Assignment vulnerability in miniOrange OAuth Single Sign On – SSO OAuth Client miniorange-login-with-eve-online-google-facebook allows Privilege Escalation.This issue affects OAuth Single Sign On – SSO OAuth Client: from n/a through 7.1.3...
CVE-2026-114233
Apache OFBiz versions 24.09 before 24.09.08 on all platforms are vulnerable to an Incorrect Privilege Assignment in the Order Manager. An authenticated user with only ORDERMGR_VIEW permissions can bypass required ORDERMGR_UPDATE permissions to modify approved orders. Specifically, the vulnerabili...
CVE-2026-114233 Apache OFBiz: Incorrect Privilege Assignment in Order Manager Enables Unauthorized Modification of Approved Orders
Incorrect Privilege Assignment in the Order Manager in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an authenticated user who holds only order view permissions ORDERMGRVIEW, without ORDERMGRUPDATE or any role on the order, to modify approved orders, changing a ship group's shipping...
EUVD-2026-116887
Incorrect Privilege Assignment vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows Privilege Escalation.This issue affects Uncanny Toolkit for LearnDash: from n/a through 3.8.2...
CVE-2026-65555
The Uncanny Toolkit for LearnDash WordPress plugin (versions through 3.8.2 ) is vulnerable to an Incorrect Privilege Assignment vulnerability (CWE-266 ). This flaw allows for Privilege Escalation , potentially enabling an attacker to gain elevated permissions within the application. The issue was...
EUVD-2026-116888
Incorrect Privilege Assignment vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Privilege Escalation.This issue affects JetFormBuilder: from n/a through 3.6.7.1...
CVE-2026-65555 WordPress Uncanny Toolkit for LearnDash plugin <= 3.8.2 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows Privilege Escalation.This issue affects Uncanny Toolkit for LearnDash: from n/a through 3.8.2...
CVE-2026-119481: Crocoblock JetFormBuilder: Incorrect Privilege Assignment vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Privilege…
Incorrect Privilege Assignment vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Privilege Escalation.This issue affects JetFormBuilder: from n/a through 3.6.7.1...
CVE-2026-65555: Uncanny Owl Uncanny Toolkit for LearnDash: Incorrect Privilege Assignment vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit…
Incorrect Privilege Assignment vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows Privilege Escalation.This issue affects Uncanny Toolkit for LearnDash: from n/a through 3.8.2...
PT-2026-136949
Name of the Vulnerable Software and Affected Versions Uncanny Toolkit for LearnDash versions prior to 3.8.2 Description An incorrect privilege assignment flaw allows unauthenticated attackers to gain elevated privileges on the site, leading to privilege escalation. Recommendations At the moment,...
CVE-2024-54363-Exploit
CVE-2024-54363-Exploit Incorrect Privilege Assignment vulnerability in nssTheme Wp NssUser Register allows Privilege Escalation.This issue affects Wp NssUser Register: from n/a through 1.0.0. Description The nssTheme Wp NssUser Register plugin for WordPress is vulnerable to an Incorrect Privilege...