4605 matches found
CVE-2026-125810
Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.2...
CVE-2026-124267 WordPress Gmail SMTP plugin <= 1.2.3.23 - Broken Access Control vulnerability
Missing Authorization vulnerability in Noor Alam Gmail SMTP gmail-smtp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gmail SMTP: from n/a through 1.2.3.23...
CVE-2026-124267
The WordPress Gmail SMTP plugin (versions
CVE-2026-121776
The WP Chill Passster content-protector plugin (versions up to and including 4.3.20 ) is vulnerable to a Missing Authorization flaw. This issue allows for the exploitation of incorrectly configured access control security levels, potentially leading to unauthorized access. While the vulnerability...
CVE-2026-121776 WordPress Passster plugin <= 4.3.20 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.20...
CVE-2026-125858 WordPress CleverReach® WP plugin <= 1.5.26 - Broken Access Control vulnerability
Missing Authorization vulnerability in CleverReach CleverReach® WP cleverreach-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CleverReach® WP: from n/a through 1.5.26...
CVE-2026-125858
The CleverReach® WP WordPress plugin (versions up to 1.5.26 ) is susceptible to a Missing Authorization vulnerability. This flaw allows for the exploitation of incorrectly configured access control security levels , leading to broken access control. Specific details regarding the root cause or re...
CVE-2026-125853
The Everest Backup WordPress plugin (versions up to and including 2.3.15 ) is susceptible to a Missing Authorization vulnerability. This flaw allows for the exploitation of Incorrectly Configured Access Control security levels, specifically identified as a Broken Access Control issue. The vulnera...
CVE-2026-125853 WordPress Everest Backup plugin <= 2.3.14 - Broken Access Control vulnerability
Missing Authorization vulnerability in Everestthemes Everest Backup everest-backup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Everest Backup: from n/a through 2.3.15...
CVE-2026-125825
The WordPress RepairBuddy plugin (computer-repair-shop) by Webful Creations is vulnerable to a Missing Authorization issue (CWE-862). This flaw allows an attacker to exploit Incorrectly Configured Access Control Security Levels . The vulnerability affects versions from n/a through 4.1236 . The im...
CVE-2026-125825 WordPress RepairBuddy plugin <= 4.1236 - Broken Access Control vulnerability
Missing Authorization vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RepairBuddy: from n/a through 4.1236...
CVE-2026-125792
The Andy Moyle Church Admin WordPress plugin versions up to and including 5.1.8 are affected by a Missing Authorization vulnerability (CWE-862). This Broken Access Control issue allows attackers to exploit incorrectly configured access control security levels. The vulnerability results in a LOW i...
CVE-2026-125792 WordPress Church Admin plugin <= 5.1.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in Andy Moyle Church Admin church-admin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Church Admin: from n/a through 5.1.8...
CVE-2026-125834
The WP Media Imagify plugin (versions n/a through 2.3.4 ) contains a Missing Authorization vulnerability. This flaw allows for Exploiting Incorrectly Configured Access Control Security Levels , which could impact the confidentiality of the system. No specific exploit details or remediation steps ...
CVE-2026-125834 WordPress Imagify plugin <= 2.3.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP Media Imagify imagify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Imagify: from n/a through 2.3.4...
CVE-2026-125827
The WordPress Event Tickets plugin (versions
CVE-2026-125827 WordPress Event Tickets plugin <= 5.31.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.31.0...
CVE-2026-125810 WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.2...
