CVE-2026-65463

Subscriber Insecure Direct Object References IDOR in Masteriyo - LMS = 2.3.1 versions...

WordPress Paid Member Subscriptions plugin <= 3.0.7 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Paid Member Subscriptions versions = 3.0.7...

CVE-2026-65501

Unauthenticated Insecure Direct Object References IDOR in Shiptastic for WooCommerce = 5.1.0 versions...

EUVD-2026-48112

Unauthenticated Insecure Direct Object References IDOR in Shiptastic for WooCommerce = 5.1.0 versions...

CVE-2026-65463 WordPress Masteriyo - LMS plugin <= 2.3.1 - Insecure Direct Object References (IDOR) vulnerability

Subscriber Insecure Direct Object References IDOR in Masteriyo - LMS = 2.3.1 versions...

EUVD-2026-48075

Subscriber Insecure Direct Object References IDOR in Masteriyo - LMS = 2.3.1 versions...

CVE-2026-65456 WordPress Product Slider for WooCommerce plugin <= 1.13.62 - Insecure Direct Object References (IDOR) vulnerability

Contributor Insecure Direct Object References IDOR in Product Slider for WooCommerce = 1.13.62 versions...

CVE-2026-65456 WordPress Product Slider for WooCommerce plugin <= 1.13.62 - Insecure Direct Object References (IDOR) vulnerability

Contributor Insecure Direct Object References IDOR in Product Slider for WooCommerce = 1.13.62 versions...

EUVD-2026-48221

Contributor Insecure Direct Object References IDOR in Product Slider for WooCommerce = 1.13.62 versions...

EUVD-2026-48204

Unauthenticated Insecure Direct Object References IDOR in Easy Appointments = 3.12.27 versions...

CVE-2026-61946 WordPress Easy Appointments plugin <= 3.12.27 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References IDOR in Easy Appointments = 3.12.27 versions...

PT-2026-63885

Subscriber Insecure Direct Object References IDOR in Masteriyo - LMS = 2.3.1 versions...

PT-2026-63879

Contributor Insecure Direct Object References IDOR in Product Slider for WooCommerce = 1.13.62 versions...

PT-2026-63862

Unauthenticated Insecure Direct Object References IDOR in Easy Appointments = 3.12.27 versions...

WordPress Masteriyo - LMS plugin <= 2.3.1 - Insecure Direct Object References (IDOR) vulnerability

WordPress Masteriyo - LMS plugin = 2.3.1 - Insecure Direct Object References IDOR vulnerability discovered by Celvex Group in WordPress Plugin Masteriyo - LMS versions = 2.3.1...

WordPress Product Slider for WooCommerce plugin <= 1.13.62 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Product Slider for WooCommerce versions = 1.13.62...

Adobe Experience Manager XXE

The vulnerability of the Adobe Media Encoder application relates to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow a remote attacker to perform XXE attacks...

CVE-2026-47414

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an Insecure Direct Object Reference. Five label endpoints — PATCH /workspaces/workspaceid/labels/labelid, DELETE .../labels/labelid, POST .../issues/issueid/labels/labelid, DELETE...

CVE-2026-47418

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an Insecure Direct Object Reference. The project CRUD endpoints GET / PATCH / DELETE /workspaces/workspaceid/projects/projectid and GET .../projectid/stats gate access on...

EUVD-2026-46339

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an Insecure Direct Object Reference. The agent CRUD endpoints GET / PATCH / DELETE /workspaces/workspaceid/agents/agentid gate access on requireworkspacememberworkspaceid only, then...