CVE-2026-114186

The AnyWhere Elementor WordPress plugin (versions up to and including 1.3.0 ) is susceptible to a Missing Authorization vulnerability. This flaw allows for the exploitation of incorrectly configured access control security levels within the anywhere-elementor component. The vulnerability is class...

CVE-2026-114186 WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AnyWhere Elementor: from n/a through 1.3.0...

CVE-2026-120858

The WordPress FluentForm plugin (versions

CVE-2026-109899

The Melapress Role Editor WordPress plugin (versions up to and including 1.3.0 ) is susceptible to a Missing Authorization vulnerability. This flaw allows for the exploitation of incorrectly configured access control security levels , leading to broken access control. While the specific technical...

CVE-2026-120858 WordPress FluentForm plugin <= 6.2.16 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP ManageNinja LLC FluentForm fluentform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentForm: from n/a through 6.2.16...

CVE-2026-109899 WordPress Melapress Role Editor plugin <= 1.3.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Melapress Melapress Role Editor melapress-role-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Melapress Role Editor: from n/a through 1.3.0...

CVE-2026-124258

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.3.1...

CVE-2026-119522

The ThemeGrill User Registration WordPress plugin (versions

CVE-2026-119522 WordPress User Registration plugin <= 5.3.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.3.1...

CVE-2026-123461 WordPress FOX plugin <= 1.5.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in PluginUs.Net FOX woocommerce-currency-switcher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FOX: from n/a through 1.5.6...

CVE-2026-123461

The FOX woocommerce-currency-switcher plugin for WordPress (versions up to and including 1.5.6 ) contains a Broken Access Control vulnerability (CWE-862). The issue stems from Missing Authorization , which allows for the exploitation of incorrectly configured access control security levels. No sp...

EUVD-2026-119321

Missing Authorization vulnerability in PluginUs.Net FOX woocommerce-currency-switcher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FOX: from n/a through 1.5.6...

CVE-2026-124258 WordPress User Registration plugin <= 5.3.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.3.1...

CVE-2026-124258

The ThemeGrill User Registration WordPress plugin (versions

CVE-2026-123474

Missing Authorization vulnerability in LeapWorx Premium Blocks – Gutenberg Blocks for WordPress premium-blocks-for-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premium Blocks – Gutenberg Blocks for WordPress: from n/a through 2.3.18...

CVE-2026-123467

Missing Authorization vulnerability in StylemixThemes Motors motors-car-dealership-classified-listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors: from n/a through 1.4.128...

CVE-2026-122660

Missing Authorization vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FloristPress: from n/a through 7.8.5...

CVE-2026-122659

Missing Authorization vulnerability in WP ManageNinja LLC Fluent Booking fluent-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Booking: from n/a through 2.5.0...

CVE-2026-123462

Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.2...

CVE-2026-123467

The Motors plugin for WordPress (specifically motors-car-dealership-classified-listings by StylemixThemes) is vulnerable to a Missing Authorization vulnerability (CWE-862) in versions up to and including 1.4.128 . The root cause is incorrectly configured access control security levels , which cou...