CVE-2026-65479

Subscriber Broken Access Control in Reviewer = 3.14.2 versions...

CVE-2026-65478

Subscriber Broken Access Control in ListingPro = 2.9.10 versions...

CVE-2026-65463

Subscriber Insecure Direct Object References IDOR in Masteriyo - LMS = 2.3.1 versions...

CVE-2026-61973

Subscriber Broken Access Control in ShopLentor Pro = 2.8.5 versions...

CVE-2026-59542

Subscriber Arbitrary File Deletion in Kali Forms = 2.4.18 versions...

CVE-2026-59543

Subscriber Remote Code Execution RCE in Advanced Views = 3.8.11 versions...

CVE-2026-59522

Subscriber Broken Access Control in WP ERP = 1.17.5 versions...

CVE-2026-59541

Subscriber Privilege Escalation in WP BASE Booking = 6.3.1 versions...

CVE-2026-59513

Subscriber Cross Site Scripting XSS in Masteriyo - LMS = 2.3.0 versions...

CVE-2026-57808

Subscriber Arbitrary Content Deletion in WP EasyPay = 4.5.0 versions...

CVE-2026-57699

Subscriber Cross Site Scripting XSS in Slider Pro = 4.8.13 versions...

CVE-2026-57703

Subscriber Broken Access Control in Sunshine Photo Cart = 3.6.10.1 versions...

CVE-2026-57384

Subscriber Cross Site Scripting XSS in WishList Member X = 3.32.0 versions...

CVE-2026-57367

Subscriber Broken Access Control in WP Booking System 5.12.8.1 versions...

CVE-2026-27423

Subscriber Broken Access Control in Participants Database = 2.7.8.4 versions...

CVE-2026-25427

Subscriber Broken Access Control in eRoom = 1.7.1 versions...

CVE-2026-65530 WordPress TemplateSpare plugin <= 4.2.2 - Broken Access Control vulnerability

Subscriber Broken Access Control in TemplateSpare = 4.2.2 versions...

EUVD-2026-48131

Subscriber Broken Access Control in TemplateSpare = 4.2.2 versions...

CVE-2026-65530

Subscriber Broken Access Control in TemplateSpare = 4.2.2 versions...

CVE-2026-65530

Technical details for CVE-2026-65530 are not publicly available in the provided documents; the description notes a broken access control in TemplateSpare