CVE-2026-114176

The DigitalME eRoom WordPress plugin (specifically the eroom-zoom-meetings-webinar component) is vulnerable to a Missing Authorization flaw in versions up to and including 1.7.1 . This vulnerability allows attackers to exploit incorrectly configured access control security levels , potentially le...

CVE-2026-114176 WordPress eRoom plugin <= 1.7.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eRoom: from n/a through 1.7.1...

CVE-2026-111849

The WpTravelly tour-booking-manager plugin for WordPress, developed by Magepeople inc. , contains a Broken Access Control vulnerability (CWE-862) affecting versions up to and including 2.3.5 . The root cause is a Missing Authorization flaw that allows for the exploitation of incorrectly configure...

CVE-2026-111849 WordPress WpTravelly plugin <= 2.3.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.5...

CVE-2026-111849 WordPress WpTravelly plugin <= 2.3.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.5...

PT-2026-120596

Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.5...

CVE-2026-112824

Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through 5.9.7...

CVE-2026-112824 WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through 5.9.7...

EUVD-2026-105141

Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through 5.9.7...

CVE-2026-112824

The Bus Ticket Booking with Seat Reservation WordPress plugin, developed by Magepeople inc., is affected by a Broken Access Control vulnerability (CWE-862) in versions up to and including 5.9.7 . The flaw stems from Incorrectly Configured Access Control Security Levels , which allows for unauthor...

CVE-2026-112824 WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bus Ticket Booking with Seat Reservation: from n/a through 5.9.7...

CVE-2026-111839 WordPress Broadcast Live Video plugin <= 7.3.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadcast Live Video: from n/a through 7.3.7...

CVE-2026-111839

The WordPress Broadcast Live Video plugin (videowhisper-live-streaming-integration) versions 7.3.7 and below is vulnerable to a Missing Authorization issue. This flaw allows for Exploiting Incorrectly Configured Access Control Security Levels . The vulnerability results in Broken Access Control ,...

CVE-2026-110383

Authorization Bypass Through User-Controlled Key vulnerability in WP E-Signature Electronic Signature Add-on for Fluent Forms signature-fluent-contract-forms-add-on allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Electronic Signature Add-on for Fluent...

EUVD-2026-103426

Authorization Bypass Through User-Controlled Key vulnerability in WP E-Signature Electronic Signature Add-on for Fluent Forms signature-fluent-contract-forms-add-on allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Electronic Signature Add-on for Fluent...

CVE-2026-110882

Missing Authorization vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications sms-alert allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SMS Alert Order Notifications: from n/a through 4.0.1...

EUVD-2026-103302

Missing Authorization vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications sms-alert allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SMS Alert Order Notifications: from n/a through 4.0.1...

CVE-2026-111396

The Advanced Post Manager plugin for WordPress (versions

CVE-2026-111409 WordPress YITH PayPal Express Checkout for WooCommerce plugin <= 1.61.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in YITH YITH PayPal Express Checkout for WooCommerce yith-paypal-express-checkout-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH PayPal Express Checkout for WooCommerce: from n/a through 1.61.0...

CVE-2026-110900

The Liquid Web / StellarWP BookIt WordPress plugin is vulnerable to a Broken Access Control issue (CWE-862) in versions up to and including 2.6.0.5 . The root cause is Incorrectly Configured Access Control Security Levels , specifically a Missing Authorization vulnerability. This allows an attack...