CVE-2026-103685

The VillaTheme ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce (woo-alidropship) plugin is affected by a Missing Authorization vulnerability. This issue allows for Exploiting Incorrectly Configured Access Control Security Levels in versions from n/a through 2.2.4 . The vulnerabi...

CVE-2026-103357 WordPress GIFT4U plugin <= 1.1.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in VillaTheme GIFT4U gift4u-gift-cards-all-in-one-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GIFT4U: from n/a through 1.1.3...

CVE-2026-103357

The VillaTheme GIFT4U (gift4u-gift-cards-all-in-one-for-woo) WordPress plugin is susceptible to a Missing Authorization vulnerability in versions through 1.1.3 . This flaw allows for Exploiting Incorrectly Configured Access Control Security Levels , potentially leading to unauthorized actions wit...

CVE-2026-93950

Missing Authorization vulnerability in StylemixThemes Motors motors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors: from n/a through 1.4.108...

CVE-2026-93950 WordPress Motors theme <= 1.4.108 - Broken Access Control vulnerability

Missing Authorization vulnerability in StylemixThemes Motors motors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors: from n/a through 1.4.108...

CVE-2026-93950

The StylemixThemes Motors WordPress theme (versions up to and including 1.4.108 ) is susceptible to a Broken Access Control vulnerability. The issue arises from Missing Authorization , specifically allowing for the exploitation of Incorrectly Configured Access Control Security Levels . This vulne...

CVE-2026-62042

Missing Authorization vulnerability in unFocus Projects Scripts n Styles scripts-n-styles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Scripts n Styles: from n/a through 3.5.8...

CVE-2026-39779

Missing Authorization vulnerability in Asgaros Asgaros Forum asgaros-forum allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Asgaros Forum: from n/a through 3.4.0...

CVE-2026-62028 WordPress Before After Image Comparison – Image comparison for WP plugin <= 1.1.21 - Broken Access Control vulnerability

Missing Authorization vulnerability in bPlugins Before After Image Comparison – Image comparison for WP before-after-image-compare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Before After Image Comparison – Image comparison for WP: from n/a through...

EUVD-2026-95746

Missing Authorization vulnerability in bPlugins Before After Image Comparison – Image comparison for WP before-after-image-compare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Before After Image Comparison – Image comparison for WP: from n/a through...

CVE-2026-105883

The Th Shop Mania WordPress theme (versions

CVE-2026-105883 WordPress Th Shop Mania theme <= 1.9.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeHunk Th Shop Mania th-shop-mania allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Th Shop Mania: from n/a through 1.9.1...

CVE-2026-39779

The Asgaros Forum WordPress plugin (versions 3.4.0 and below ) is vulnerable to a Missing Authorization (CWE-862) flaw. This issue allows for the exploitation of incorrectly configured access control security levels . While the specific component or function is not identified, the vulnerability r...

CVE-2026-39779 WordPress Asgaros Forum plugin <= 3.4.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Asgaros Asgaros Forum asgaros-forum allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Asgaros Forum: from n/a through 3.4.0...

EUVD-2026-95731

Missing Authorization vulnerability in Asgaros Asgaros Forum asgaros-forum allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Asgaros Forum: from n/a through 3.4.0...

CVE-2026-62040 WordPress Restrict User Access – Membership Plugin with Force plugin <= 2.8.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restrict-user-access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through 2.8.1...

CVE-2026-62040

The Restrict User Access – Membership Plugin with Force (WordPress plugin) is vulnerable to a Broken Access Control issue in versions up to and including 2.8.1 . The root cause is a Missing Authorization flaw that allows for the exploitation of incorrectly configured access control security level...

CVE-2026-62040 WordPress Restrict User Access – Membership Plugin with Force plugin <= 2.8.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restrict-user-access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restrict User Access – Membership Plugin with Force: from n/a through 2.8.1...

CVE-2026-62041

The WP Event Manager plugin for WordPress (versions

CVE-2026-62041 WordPress WP Event Manager plugin <= 3.4.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ashok Dudhat WP Event Manager wp-event-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Manager: from n/a through 3.4.1...