92122 matches found
CVE-2026-65476: Missing Authorization
Unauthenticated Broken Access Control in Civi = 2.2.4 versions...
CVE-2026-65468: Missing Authorization
Unauthenticated Broken Access Control in JetBooking = 4.1.2 versions...
CVE-2026-65454: Improper Neutralization of Special Elements used in an SQL Command
Contributor SQL Injection in Quiz And Survey Master = 11.2.0 versions...
CVE-2026-57716: Improper Limitation of a Pathname to a Restricted Directory
Unauthenticated Arbitrary File Deletion in Broadcast Live Video = 7.2.4 versions...
CVE-2026-57397: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Coaching = 3.9.2 versions...
CVE-2026-27399: Missing Authorization
Unauthenticated Broken Access Control in MarketKing = 2.1.40 versions...
CVE-2026-27372: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice = 2.2.6 versions...
CVE-2026-25466: Missing Authorization
Unauthenticated Broken Access Control in WP Go Maps = 10.1.04 versions...
CVE-2026-57427: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Download Monitor - WPForms Lock = 1.0.4 versions...
CVE-2026-27423: Missing Authorization
Subscriber Broken Access Control in Participants Database = 2.7.8.4 versions...
CVE-2026-27392: Missing Authorization
Contributor Broken Access Control in uListing = 2.2.0 versions...
CVE-2026-27377: Missing Authorization
Booking Agent Broken Access Control in QuickCal - Appointment Booking Calendar for WordPress = 1.0.16 versions...
CVE-2026-25427: Missing Authorization
Subscriber Broken Access Control in eRoom = 1.7.1 versions...
CVE-2026-25405: Improper Neutralization of Special Elements used in an SQL Command
Contributor SQL Injection in eRoom = 1.7.1 versions...
CVE-2026-65496: Server-Side Request Forgery (SSRF)
Author Server Side Request Forgery SSRF in Complianz = 7.5.0 versions...
CVE-2026-65494: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in Dokan Pro = 5.0.2 versions...
CVE-2026-65489: Missing Authorization
Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...
CVE-2026-65485: Missing Authorization
Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...