PT-2026-39716

Name of the Vulnerable Software and Affected Versions Bitwarden Server versions prior to 2026.4.0 Description A missing authorization issue allows a provider service user to add an arbitrary organization to their provider. This is possible through the 'POST /providers/providerId/clients/existing'...

CVE-2026-5465

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.1.3. This is due to the UpdateProviderCommandHandler failing to validate changes to the externalId field when a Provider Employe...

PT-2026-30799

Name of the Vulnerable Software and Affected Versions Amelia plugin for WordPress versions up to and including 2.1.3 Description The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is susceptible to Insecure Direct Object Reference. The UpdateProviderCommandHandler does...