WordPress plugin Easy Property Listings has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-4036

Name of the Vulnerable Software and Affected Versions wpeverest User Registration versions through 4.4.6 Description An issue exists in wpeverest User Registration related to incorrectly configured access control security levels, allowing for missing authorization. The vulnerability allows...

PT-2026-4038

Name of the Vulnerable Software and Affected Versions TaxCloud for WooCommerce versions through 8.3.8 Description An authorization issue exists in TaxCloud for WooCommerce simple-sales-tax, allowing exploitation of incorrectly configured access control security levels. Recommendations Update...

PT-2026-4223

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Overton overton allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Overton: from n/a through = 1.3...

PT-2026-4025

Name of the Vulnerable Software and Affected Versions Peach Payments Gateway versions n/a through 3.3.6 Description A missing authorization issue exists in the Peach Payments Gateway. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized acces...

PT-2026-4053

Name of the Vulnerable Software and Affected Versions Codeless Slider Templates versions through 1.0.3 Description A missing authorization issue exists in Codeless Slider Templates. The issue allows access to functionality that is not properly constrained by Access Control Lists ACLs...

PT-2026-4225

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Justicia justicia allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Justicia: from n/a through = 1.2...

PT-2026-3963

Name of the Vulnerable Software and Affected Versions Themeum Tutor LMS versions through 3.9.4 Description An authorization bypass exists due to incorrectly configured access control security levels in Themeum Tutor LMS. This allows exploitation through a user-controlled key. Recommendations Upda...

PT-2026-4095

Name of the Vulnerable Software and Affected Versions Scalenut versions through 1.1.3 Description A missing authorization flaw exists in Scalenut. This allows exploitation of incorrectly configured access control security levels. Recommendations Update Scalenut to a version later than 1.1.3...

WordPress plugin SEO Booster has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-4072

Name of the Vulnerable Software and Affected Versions Hospital Doctor Directory versions through 1.3.9 Description The Hospital Doctor Directory software contains a flaw related to incorrectly configured access control security levels, potentially allowing unauthorized access. Recommendations...

PT-2026-4006

Name of the Vulnerable Software and Affected Versions Searcher for Elementor versions through 1.0.3 Description The software contains a missing authorization issue due to incorrectly configured access control security levels. Recommendations Update Searcher for Elementor to a version later than...

PT-2026-4193

Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through = 1.6.9.15...

PT-2026-4074

Name of the Vulnerable Software and Affected Versions e-plugins Hotel Listing versions through 1.4.2 Description The software contains a missing authorization issue related to incorrectly configured access control security levels. This allows for exploitation of the system. Recommendations Update...

GitLab Enterprise Edition (EE) and GitLab Community Edition (CE) security vulnerabilities

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of the American company GitLab. GitLab Enterprise Edition is a content management system. GitLab Community Edition is a community version of GitLab. There were security vulnerabilities in versions of GitLab Enterprise...

PT-2026-4189

Missing Authorization vulnerability in Broadstreet Broadstreet Ads broadstreet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadstreet Ads: from n/a through = 1.52.1...

PT-2026-4075

Name of the Vulnerable Software and Affected Versions Easy Property Listings versions through 3.5.17 Description The software contains a missing authorization issue related to incorrectly configured access control security levels. This allows for potential exploitation of the system...

MiracleLinux 8 : ibus-1.5.19-11.el8 (AXSA:2020-640:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-640:02 advisory. ibus: missing authorization allows local attacker to access the input bus of another user CVE-2019-14822 CVE-2019-14822 A flaw was discovered in ibus that...

MiracleLinux 8 : glib2-2.56.4-8.el8 (AXSA:2020-523:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-523:01 advisory. ibus: missing authorization allows local attacker to access the input bus of another user CVE-2019-14822 CVE-2019-14822 A flaw was discovered in ibus that...

PT-2026-3221

Name of the Vulnerable Software and Affected Versions lucy-xss-filter versions prior to commit e5826c0 Description The software contains a flaw where an attacker can execute malicious JavaScript. This is due to improper sanitization resulting from misconfigured default superset rule files...