WordPress plugin HD Quiz security vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-4379

Name of the Vulnerable Software and Affected Versions sheepfish WebP Conversion versions through 2.1 Description An issue exists in sheepfish WebP Conversion related to incorrectly configured access control security levels, allowing for missing authorization. The issue allows exploitation due to...

PT-2026-4461

Name of the Vulnerable Software and Affected Versions Mikado-Themes Rosebud versions through 1.4 Description An authorization bypass exists in Mikado-Themes Rosebud due to incorrectly configured access control security levels. This allows exploitation through a user-controlled key. Recommendation...

PT-2026-4458

Name of the Vulnerable Software and Affected Versions Trusona for WordPress versions through 2.0.0 Description The software contains a missing authorization issue that allows exploitation of incorrectly configured access control security levels. Recommendations Update Trusona for WordPress to a...

PT-2026-4420

Name of the Vulnerable Software and Affected Versions WP Swings Points and Rewards for WooCommerce versions through 2.9.5 Description An authorization issue exists in WP Swings Points and Rewards for WooCommerce, allowing exploitation due to incorrectly configured access control security levels...

PT-2026-4438

Name of the Vulnerable Software and Affected Versions themebeez Simple GDPR Cookie Compliance versions through 2.0.0 Description An issue exists in themebeez Simple GDPR Cookie Compliance where incorrectly configured access control security levels can be exploited, leading to a missing...

PT-2026-4433

Name of the Vulnerable Software and Affected Versions XLPlugins NextMove Lite versions through 2.23.0 Description An authorization bypass exists due to incorrectly configured access control security levels. This allows exploitation through a user-controlled key. The issue is present in the...

WordPress plugin Bayarcash WooCommerce has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. The WordPre...

WordPress plugin Cream Magazine has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. The WordPre...

PT-2026-4381

Name of the Vulnerable Software and Affected Versions SiteLock Security versions through 5.0.2 Description A missing authorization issue exists in SiteLock Security. The issue involves exploiting incorrectly configured access control security levels. Recommendations Update SiteLock Security to a...

PT-2026-4439

Name of the Vulnerable Software and Affected Versions X Addons for Elementor versions through 1.0.23 Description An issue exists in X Addons for Elementor where incorrectly configured access control security levels can be exploited, leading to a missing authorization condition. The vulnerability...

PT-2026-4388

Name of the Vulnerable Software and Affected Versions Download After Email versions through 2.1.9 Description A missing authorization issue exists in the Download After Email software. This flaw stems from incorrectly configured access control security levels, potentially allowing unauthorized...

PT-2026-4374

Name of the Vulnerable Software and Affected Versions Essekia Tablesome versions through 1.1.35.2 Description An authorization issue exists in Essekia Tablesome, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update Essekia Tablesome to a versi...

WordPress plugin Orchid Store has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. The WordPre...

PT-2026-4383

Name of the Vulnerable Software and Affected Versions Automatic Featured Images from Videos versions through 1.2.7 Description The software contains a missing authorization issue due to incorrectly configured access control security levels. Recommendations Update Automatic Featured Images from...

WordPress plugin Multilanguage by BestWebSoft has security vulnerabilities.

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-4398

Name of the Vulnerable Software and Affected Versions ElementCamp versions prior to 2.3.3 Description An authorization issue exists in ElementCamp that allows exploitation of incorrectly configured access control security levels. Recommendations Update ElementCamp to a version later than 2.3.2...

PT-2026-4440

Name of the Vulnerable Software and Affected Versions Bayarcash WooCommerce versions through 4.3.11 Description A missing authorization issue exists in Bayarcash WooCommerce bayarcash-wc, allowing exploitation of incorrectly configured access control security levels. Recommendations Update...

PT-2026-4372

Name of the Vulnerable Software and Affected Versions MyThemeShop WP Subscribe versions through 1.2.16 Description An authorization issue exists in MyThemeShop WP Subscribe wp-subscribe, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update WP...

CVE-2026-24124 Dragonfly Manager Job API Allows Unauthenticated Access

Dragonfly is an open source P2P-based file distribution and image acceleration system. In versions 2.4.1-rc.0 and below, the Job API endpoints /api/v1/jobs lack JWT authentication middleware and RBAC authorization checks in the routing configuration. This allows any unauthenticated user with acce...