WordPress WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell plugin <= 3.12.13 - Missing Authorization to Unauthenticated Arbitrary Product Price Manipulation vulnerability

Missing Authorization to Unauthenticated Arbitrary Product Price Manipulation vulnerability discovered by Wordfence PRISM in WordPress Plugin WPFunnels versions = 3.12.13...

CVE-2026-69724

CVE-2026-69724 is a missing authorization vulnerability in Microsoft Office SharePoint that allows an authorized attacker to achieve remote code execution over a network. The Microsoft CNA rates it CVSS 3.1 Base 8.8 (High) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attac...

EUVD-2026-73155

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-69641

CVE-2026-69641 is a missing authorization vulnerability in Microsoft Exchange Server that allows an authorized attacker to elevate privileges over a network . The CVSS v3.1 base score is 9.1 (Critical) with a scope change, indicating high impact on confidentiality, integrity, and availability onc...

EUVD-2026-73146

Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-69380

CVE-2026-69380 is a missing authorization vulnerability in Microsoft Exchange Server that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.1 (HIGH) , with high impact to confidentiality and integrity and no availability impact. Attack complexity is low, ...

EUVD-2026-73129

Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73019

Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...

CVE-2026-69554

CVE-2026-69554 is a missing authentication vulnerability in the Microsoft Windows Search Component , allowing a local, low-privilege attacker to perform tampering with high integrity impact (CVSS v3.1: 5.5 MEDIUM , AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). No confidentiality or availability impact is...

EUVD-2026-73017

Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network...

CVE-2026-69553

CVE-2026-69553 is a missing authorization vulnerability in Windows Hyper-V that allows an authorized attacker (with low privileges) to elevate privileges over a network . The attack requires user interaction and has high attack complexity , but the impact on confidentiality, integrity, and availa...

CVE-2026-69528

CVE-2026-69528 is a local privilege escalation vulnerability in Windows Shell caused by missing authentication for a critical function . An authorized attacker (with low privileges, no user interaction required) can exploit this to gain full control over confidentiality, integrity, and availabili...

EUVD-2026-73010

Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-69415

Windows DHCP Server contains a missing authentication for critical function vulnerability that allows an authorized attacker (high privileges required) to elevate privileges over a network . The CVSS 3.1 score is 6.8 (MEDIUM) with vector AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H, indicating that user i...

EUVD-2026-72968

Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-69377

CVE-2026-69377 affects Windows Modern Device Management (MDM) , where a missing authorization check allows a low-privileged local attacker to escalate privileges with high impact on confidentiality, integrity, and availability. The assigned CVSS 3.1 score is 7.8 (HIGH) with the vector AV:L/AC:L/P...

EUVD-2026-73228

Missing authorization in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

CVE-2026-83941

CVE-2026-83941 is a missing authorization vulnerability in Entra ID (Microsoft's identity and access management service) that allows an attacker with low privileges to elevate privileges over a network. The assigned CVSS 3.1 score is 9.9 (CRITICAL) with a scope change, indicating high impact on b...

EUVD-2026-73173

Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network...

WordPress Awesome Support – WordPress HelpDesk & Support Plugin plugin <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Denial vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary User Denial vulnerability discovered by Wordfence PRISM in WordPress Plugin Awesome Support versions = 6.3.9...