41998 matches found
CVE-2026-82023 LearnPress WordPress Plugin < 4.4.6 Broken Object-Level Authorization via Quiz Answer Insert
LearnPress WordPress Plugin before 4.4.6 contains a broken object-level authorization vulnerability that allows authenticated attackers with the Instructor role to add answers to quiz questions owned by other instructors by exploiting a missing ownership check on the question answer insert path...
CVE-2026-82023 LearnPress WordPress Plugin < 4.4.6 Broken Object-Level Authorization via Quiz Answer Insert
LearnPress WordPress Plugin before 4.4.6 contains a broken object-level authorization vulnerability that allows authenticated attackers with the Instructor role to add answers to quiz questions owned by other instructors by exploiting a missing ownership check on the question answer insert path...
CVE-2026-84834
Unauthenticated PHP Object Injection in JobSearch = 3.2.0 versions...
CVE-2026-84836
Subscriber Insecure Direct Object References IDOR in WC Ukraine Shipping = 1.22.3 versions...
CVE-2026-84769
Unauthenticated Insecure Direct Object References IDOR in Business Directory = 6.4.26 versions...
CVE-2026-84752
Contributor PHP Object Injection in RTMKit = 2.1.5 versions...
CVE-2026-84753
Unauthenticated PHP Object Injection in Mail Mint = 1.31.0 versions...
WordPress SureForms plugin <= 2.12.5 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by ChinhNguyen in WordPress Plugin SureForms versions = 2.12.5...
EUVD-2026-70565
Unauthenticated PHP Object Injection in JobSearch = 3.2.0 versions...
CVE-2026-84834 WordPress JobSearch plugin <= 3.2.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in JobSearch = 3.2.0 versions...
CVE-2026-84836
WC Ukraine Shipping is a WordPress plugin affected by an Insecure Direct Object References (IDOR) vulnerability in versions 1.22.3 and earlier . The flaw allows a low-privilege user (Subscriber level) to access restricted objects, resulting in high confidentiality impact and low integrity impact,...
CVE-2026-84834
CVE-2026-84834 affects the WordPress JobSearch plugin in versions ≤ 3.2.0 . The vulnerability is an unauthenticated PHP Object Injection , allowing a remote attacker with no privileges to potentially achieve high impact on confidentiality, integrity, and availability, as reflected by a CVSS 3.1 s...
CVE-2026-84834 WordPress JobSearch plugin <= 3.2.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in JobSearch = 3.2.0 versions...
CVE-2026-84836 WordPress WC Ukraine Shipping plugin <= 1.22.3 - Insecure Direct Object References (IDOR) vulnerability
Subscriber Insecure Direct Object References IDOR in WC Ukraine Shipping = 1.22.3 versions...
EUVD-2026-70568
Subscriber Insecure Direct Object References IDOR in WC Ukraine Shipping = 1.22.3 versions...
CVE-2026-84769 WordPress Business Directory plugin <= 6.4.26 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References IDOR in Business Directory = 6.4.26 versions...
EUVD-2026-70577
Unauthenticated Insecure Direct Object References IDOR in Business Directory = 6.4.26 versions...
CVE-2026-84769 WordPress Business Directory plugin <= 6.4.26 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References IDOR in Business Directory = 6.4.26 versions...