CVE-2026-65489

CVE-2026-65489 affects the WordPress plugin “LA-Studio Element Kit for Elementor” up to version 1.6.2. The issue is described as Unauthenticated Broken Access Control, allowing access to restricted functionality without credentials. The referenced CVSS 3.1 base score is 5.3 (MEDIUM) with network ...

CVE-2026-65489

Unauthenticated Broken Access Control in LA-Studio Element Kit for Elementor = 1.6.2 versions...

EUVD-2026-48098

Unauthenticated Broken Access Control in Photography = 7.7.6 versions...

CVE-2026-65487 WordPress Photography theme <= 7.7.6 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Photography = 7.7.6 versions...

EUVD-2026-48097

Unauthenticated Broken Access Control in Event post = 6.0.1 versions...

CVE-2026-65485

CVE-2026-65485 affects the WordPress plugin Content Control

EUVD-2026-48096

Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...

CVE-2026-65485

Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...

CVE-2026-65485 WordPress Content Control plugin <= 2.6.5 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...

EUVD-2026-48087

Unauthenticated Broken Access Control in Civi = 2.2.4 versions...

CVE-2026-65476 WordPress Civi theme <= 2.2.4 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Civi = 2.2.4 versions...

CVE-2026-65476

Unauthenticated Broken Access Control in Civi = 2.2.4 versions...

CVE-2026-65474

The CVE concerns WordPress Ninja Tables plugin

CVE-2026-65472

Unauthenticated Broken Access Control in Kit formerly ConvertKit = 3.3.5 versions...

CVE-2026-65472

CVE-2026-65472 concerns a vulnerability in the WordPress Kit (formerly ConvertKit) plugin for WordPress, affecting versions

CVE-2026-65472 WordPress Kit (formerly ConvertKit) plugin <= 3.3.5 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Kit formerly ConvertKit = 3.3.5 versions...

CVE-2026-65472 WordPress Kit (formerly ConvertKit) plugin <= 3.3.5 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Kit formerly ConvertKit = 3.3.5 versions...

EUVD-2026-48081

Unauthenticated Broken Access Control in AWP Classifieds = 4.4.7 versions...

CVE-2026-65469 WordPress AWP Classifieds plugin <= 4.4.7 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in AWP Classifieds = 4.4.7 versions...

EUVD-2026-48080

Unauthenticated Broken Access Control in JetBooking = 4.1.2 versions...