CVE-2026-114191

The UPI QR Code Payment Gateway for WooCommerce plugin (versions up to 1.6.3 ) is affected by a Missing Authorization vulnerability. This flaw stems from Incorrectly Configured Access Control security levels, allowing for the exploitation of broken access controls. The impact is characterized by ...

EUVD-2026-109298

Missing Authorization vulnerability in Knit Pay UPI QR Code Payment Gateway for WooCommerce upi-qr-code-payment-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UPI QR Code Payment Gateway for WooCommerce: from n/a through 1.6.3...

CVE-2026-114191 WordPress UPI QR Code Payment Gateway for WooCommerce plugin <= 1.6.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Knit Pay UPI QR Code Payment Gateway for WooCommerce upi-qr-code-payment-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UPI QR Code Payment Gateway for WooCommerce: from n/a through 1.6.3...

CVE-2026-112825 WordPress Car Rental Manager plugin <= 1.5.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Magepeople inc. Car Rental Manager car-rental-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Car Rental Manager: from n/a through 1.5.3...

CVE-2026-112825

The Car Rental Manager WordPress plugin by Magepeople inc. (versions

CVE-2026-114699

Missing Authorization vulnerability in yoomoney ЮKassa для WooCommerce yookassa allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ЮKassa для WooCommerce: from n/a through 2.17.3...

CVE-2026-114696

The miniOrange Page Restriction WordPress (WP) plugin (versions up to and including 1.6.0 ) contains a Missing Authorization vulnerability. This security flaw allows for the exploitation of incorrectly configured access control security levels , potentially bypassing intended restrictions. Exploi...

CVE-2026-114696 WordPress Page Restriction WordPress (WP) plugin <= 1.6.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in miniOrange Page Restriction WordPress WP page-and-post-restriction allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Page Restriction WordPress WP: from n/a through 1.6.0...

CVE-2026-114182

The IdeaBox Creations PowerPack Addons for Elementor plugin (specifically powerpack-lite-for-elementor ) is vulnerable to a Missing Authorization flaw in versions up to and including 3.1.0 . This vulnerability allows for the exploitation of Incorrectly Configured Access Control Security Levels , ...

CVE-2026-114182 WordPress PowerPack Addons for Elementor plugin <= 3.1.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in IdeaBox Creations PowerPack Addons for Elementor powerpack-lite-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PowerPack Addons for Elementor: from n/a through 3.1.0...

CVE-2026-112826 WordPress Falcon – WordPress Optimizations & Tweaks plugin <= 2.12.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in eLightUp Falcon – WordPress Optimizations & Tweaks falcon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Falcon – WordPress Optimizations & Tweaks: from n/a through 2.12.0...

CVE-2026-112826

The eLightUp Falcon – WordPress Optimizations & Tweaks plugin (versions up to and including 2.12.0 ) contains a Missing Authorization vulnerability (CWE-862). This flaw allows for the exploitation of incorrectly configured access control security levels , resulting in broken access control . Whil...

EUVD-2026-108030

Missing Authorization vulnerability in Kings Plugins MarketKing marketking-multivendor-marketplace-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MarketKing: from n/a through 2.1.72...

EUVD-2026-107861

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Key auth allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Key auth versions: from 0.0.0 to 2.2.4...

CVE-2026-114176 WordPress eRoom plugin <= 1.7.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eRoom: from n/a through 1.7.1...

CVE-2026-114176

The DigitalME eRoom WordPress plugin (specifically the eroom-zoom-meetings-webinar component) is vulnerable to a Missing Authorization flaw in versions up to and including 1.7.1 . This vulnerability allows attackers to exploit incorrectly configured access control security levels , potentially le...

CVE-2026-111849 WordPress WpTravelly plugin <= 2.3.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.5...

CVE-2026-111849

The WpTravelly tour-booking-manager plugin for WordPress, developed by Magepeople inc. , contains a Broken Access Control vulnerability (CWE-862) affecting versions up to and including 2.3.5 . The root cause is a Missing Authorization flaw that allows for the exploitation of incorrectly configure...

CVE-2026-111849 WordPress WpTravelly plugin <= 2.3.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.5...

PT-2026-120596

Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.5...