10051 matches found
CVE-2026-28156
Subscriber SQL Injection in Do Lasso = 358 versions...
CVE-2026-27999
Subscriber Broken Access Control in Tourfic = 2.23.1 versions...
EUVD-2026-57940
Subscriber Broken Access Control in Tourfic = 2.23.1 versions...
CVE-2026-27999
The CVE-2026-27999 entry concerns the WordPress Tourfic plugin, affected in versions up to 2.23.1, with a Broken Access Control vulnerability affecting subscribers. The connected sources explicitly identify the vulnerability type and affected versions but do not provide technical details on the r...
CVE-2026-27999 WordPress Tourfic plugin <= 2.23.1 - Broken Access Control vulnerability
Subscriber Broken Access Control in Tourfic = 2.23.1 versions...
EUVD-2026-57933
Subscriber Broken Access Control in Solace Extra = 1.6.0 versions...
CVE-2026-27535 WordPress Solace Extra plugin <= 1.6.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in Solace Extra = 1.6.0 versions...
CVE-2026-27535
CVE-2026-27535 affects the WordPress Solace Extra plugin up to version 1.6.0. The vulnerability is described as Broken Access Control, enabling lower-privilege attackers to access restricted functionality. The CVSS 3.1 base score is 7.1 (High), with Network attack vector, Low attack complexity, P...
CVE-2026-14332
The Ecwid by Lightspeed Ecommerce Shopping Cart WordPress plugin before 7.0.9 does not perform a capability check or nonce verification on one of its store-management actions, allowing any authenticated user, such as a subscriber, to disconnect the store and take the storefront offline until an...
CVE-2026-14332
The Ecwid by Lightspeed Ecommerce Shopping Cart WordPress plugin before 7.0.9 does not perform a capability check or nonce verification on one of its store-management actions, allowing any authenticated user, such as a subscriber, to disconnect the store and take the storefront offline until an...
CVE-2026-14332 Ecwid by Lightspeed Ecommerce Shopping Cart < 7.0.9 - Subscriber+ Store Disconnection via 'ec_disconnect' Action
The Ecwid by Lightspeed Ecommerce Shopping Cart WordPress plugin before 7.0.9 does not perform a capability check or nonce verification on one of its store-management actions, allowing any authenticated user, such as a subscriber, to disconnect the store and take the storefront offline until an...
PT-2026-71519
Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...
PT-2026-71546
Subscriber Arbitrary File Download in AI Hub = 1.3.10 versions...
PT-2026-71515
Subscriber SQL Injection in Do Lasso = 358 versions...
PT-2026-71576
Subscriber Cross Site Scripting XSS in Accordion = 3.0.6 versions...
PT-2026-71528
Subscriber SQL Injection in Form Maker by 10Web = 1.15.44 versions...
PT-2026-71527
Subscriber Cross Site Scripting XSS in AcyMailing SMTP Newsletter = 10.11.1 versions...
PT-2026-71563
Subscriber Cross Site Scripting XSS in Profile Extra Fields by BestWebSoft = 1.3.4 versions...