CVE-2026-119485

The weDevs Dokan dokan-lite plugin for WordPress is vulnerable to a Broken Access Control (Missing Authorization) vulnerability in versions up to and including 5.3.2 . The flaw allows for exploiting Incorrectly Configured Access Control Security Levels . While the severity is rated as MEDIUM (CVS...

CVE-2026-119487

The Dokan dokan-lite plugin for WordPress versions up to and including 5.3.2 is vulnerable to a Broken Access Control (CWE-862) issue. The vulnerability is caused by Incorrectly Configured Access Control Security Levels , which allows for a Missing Authorization exploit. This flaw has a MEDIUM se...

CVE-2026-119487 WordPress Dokan plugin <= 5.3.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in weDevs Dokan dokan-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dokan: from n/a through 5.3.2...

CVE-2026-116407 WordPress Webba Booking plugin <= 6.5.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webba Booking: from n/a through 6.5.4...

CVE-2026-116407 WordPress Webba Booking plugin <= 6.5.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webba Booking: from n/a through 6.5.4...

EUVD-2026-112880

Missing Authorization vulnerability in WP Desk Custom Price for WooCommerce custom-price-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Price for WooCommerce: from n/a through 1.1.29...

CVE-2026-54871

The ShopBuilder – Elementor WooCommerce Builder Addons WordPress plugin (versions

CVE-2026-54871 WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.4.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShopBuilder – Elementor WooCommerce Builder Addons: from n/a through 3.4.2...

CVE-2026-114181

The Taxi Booking Manager for WooCommerce plugin by Magepeople inc. (versions up to and including 2.1.6 ) is vulnerable to a Missing Authorization (Broken Access Control) issue. The vulnerability allows for Exploiting Incorrectly Configured Access Control Security Levels , potentially leading to u...

CVE-2026-116856

The WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce plugin (versions up to and including 2.3.24 ) is vulnerable to a Missing Authorization vulnerability (CWE-862). This flaw allows for Exploiting Incorrectly Configured Access Control Security Levels , potentially leading ...

CVE-2026-116856 WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.24 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce flexible-quantity-measurement-price-calculator-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flexible Quantity – Measurement...

CVE-2026-116856 WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.24 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce flexible-quantity-measurement-price-calculator-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flexible Quantity – Measurement...

EUVD-2026-112870

Missing Authorization vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce flexible-quantity-measurement-price-calculator-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flexible Quantity – Measurement...

CVE-2026-118093

Missing Authorization vulnerability in WPFunnels Team Product Feed Manager best-woocommerce-feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Feed Manager: from n/a through 7.14.1...

CVE-2026-27401

Missing Authorization vulnerability in YITH YITH PayPal Express Checkout for WooCommerce yith-paypal-express-checkout-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH PayPal Express Checkout for WooCommerce: from n/a through 1.62.0...

CVE-2026-27401

The YITH PayPal Express Checkout for WooCommerce plugin (versions n/a through 1.62.0 ) is vulnerable to a Broken Access Control issue due to Missing Authorization . This flaw allows for the exploitation of incorrectly configured access control security levels. While the vulnerability is documente...

CVE-2026-115963

Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadcast Live Video: from n/a through 7.3.9...

EUVD-2026-112733

Missing Authorization vulnerability in VillaTheme HANDMADE – Dropshipping for Etsy and WooCommerce handmade-dropshipping-for-etsy-and-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HANDMADE – Dropshipping for Etsy and WooCommerce: from n/a through...

CVE-2026-112827 WordPress HANDMADE – Dropshipping for Etsy and WooCommerce plugin <= 1.0.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in VillaTheme HANDMADE – Dropshipping for Etsy and WooCommerce handmade-dropshipping-for-etsy-and-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HANDMADE – Dropshipping for Etsy and WooCommerce: from n/a through...

CVE-2026-112827

The VillaTheme HANDMADE – Dropshipping for Etsy and WooCommerce plugin (specifically handmade-dropshipping-for-etsy-and-woo) is vulnerable to a Missing Authorization issue. This flaw allows for the exploitation of incorrectly configured access control security levels. The vulnerability affects ve...