694 matches found
CVE-2026-42637
Unauthenticated Settings Change in PayPlug for WooCommerce Official = 3.1.0 versions...
CVE-2026-39798
Unauthenticated Settings Change in TrueBooker = 1.2.9 versions...
CVE-2026-42637 WordPress PayPlug for WooCommerce (Official) plugin <= 3.1.0 - Settings Change vulnerability
Unauthenticated Settings Change in PayPlug for WooCommerce Official = 3.1.0 versions...
CVE-2026-42637
The PayPlug for WooCommerce (Official) WordPress plugin versions
EUVD-2026-93059
Unauthenticated Settings Change in PayPlug for WooCommerce Official = 3.1.0 versions...
EUVD-2026-93042
Unauthenticated Settings Change in TrueBooker = 1.2.9 versions...
CVE-2026-39798
The WordPress TrueBooker plugin versions
CVE-2026-39798 WordPress TrueBooker plugin <= 1.2.9 - Settings Change vulnerability
Unauthenticated Settings Change in TrueBooker = 1.2.9 versions...
WordPress 워드프레스 결제 심플페이 plugin <= 5.5.17 - Settings Change vulnerability
Settings Change vulnerability discovered by Mor Golan in WordPress Plugin 워드프레스 결제 심플페이 versions = 5.5.17...
CVE-2026-85576
The All in One Files Upload WordPress plugin before 2.0.17 does not have any capability check, and does not verify the authenticity of the request, when saving its settings, allowing any authenticated user, such as a subscriber, to change them...
EUVD-2026-89630
The All in One Files Upload WordPress plugin before 2.0.17 does not have any capability check, and does not verify the authenticity of the request, when saving its settings, allowing any authenticated user, such as a subscriber, to change them...
CVE-2026-81801
Subscriber Settings Change in WP-Stateless = 4.4.1 versions...
EUVD-2026-75530
Subscriber Settings Change in WP-Stateless = 4.4.1 versions...
CVE-2026-81801 WordPress WP-Stateless plugin <= 4.4.1 - Settings Change vulnerability
Subscriber Settings Change in WP-Stateless = 4.4.1 versions...
CVE-2026-81801 WordPress WP-Stateless plugin <= 4.4.1 - Settings Change vulnerability
Subscriber Settings Change in WP-Stateless = 4.4.1 versions...
CVE-2026-81801
The WP-Stateless WordPress plugin (versions ≤ 4.4.1) is affected by a Settings Change vulnerability discovered by Johan Buenavida via Patchstack. The flaw allows a low-privileged user (e.g., subscriber) to modify settings they should not have access to, over a network with low complexity and no u...
PT-2026-89444
Subscriber Settings Change in WP-Stateless = 4.4.1 versions...
CVE-2026-81801: Missing Authorization
Subscriber Settings Change in WP-Stateless = 4.4.1 versions...