168641 matches found
CVE-2026-66678
CVE-2026-66678 concerns a Broken Access Control issue in the WordPress plugin Advanced Custom Fields: Font Awesome Field , affecting versions up to and including 6.1.1 . The connected sources consistently describe the vulnerability class and affected plugin/version but do not provide technical de...
EUVD-2026-53887
Subscriber Broken Access Control in Frontend Admin by DynamiApps = 3.29.10 versions...
CVE-2026-66470 WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Broken Access Control vulnerability
Subscriber Broken Access Control in Frontend Admin by DynamiApps = 3.29.10 versions...
CVE-2026-66452
CVE-2026-66452 affects the WordPress plugin “Legal Text Connector” by IT-Recht Kanzlei, versions
CVE-2026-66452
Unauthenticated Broken Access Control in Legal Text Connector of the IT-Recht Kanzlei = 1.0.13 versions...
CVE-2026-66452 WordPress Legal Text Connector of the IT-Recht Kanzlei plugin <= 1.0.13 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Legal Text Connector of the IT-Recht Kanzlei = 1.0.13 versions...
EUVD-2026-53885
Unauthenticated Broken Access Control in Legal Text Connector of the IT-Recht Kanzlei = 1.0.13 versions...
CVE-2026-65554
Subscriber Broken Access Control in AnsPress – Question and answer 4.4.4 versions...
CVE-2026-65554
The CVE-2026-65554 entry concerns the WordPress AnsPress – Question and Answer plugin version 4.4.4, with a Broken Access Control vulnerability affecting subscribers. The available connected sources confirm the affected software and the underlying issue as access control in the plugin’s subscribe...
EUVD-2026-53982
Subscriber Broken Access Control in AnsPress – Question and answer 4.4.4 versions...
CVE-2026-65554 WordPress AnsPress – Question and answer plugin 4.4.4 - Broken Access Control vulnerability
Subscriber Broken Access Control in AnsPress – Question and answer 4.4.4 versions...
CVE-2026-65541
Unauthenticated Broken Access Control in Staff Training = 1.0.7 versions...
EUVD-2026-53971
Unauthenticated Broken Access Control in Staff Training = 1.0.7 versions...
CVE-2026-65541 WordPress Staff Training plugin <= 1.0.7 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Staff Training = 1.0.7 versions...
CVE-2026-65541
The CVE concerns WordPress Plugin “Staff Training” versions
CVE-2026-65504
CVE-2026-65504 describes an unauthenticated broken access control in the WordPress BOX NOW Delivery Croatia plugin, vulnerable in versions
EUVD-2026-53962
Unauthenticated Broken Access Control in BOX NOW Delivery Croatia = 3.3.0 versions...
CVE-2026-32548
CVE-2026-32548 describes an unauthenticated broken access control in the WordPress WordPress SureCart plugin, affected versions up to 4.6.2. The vulnerability is characterized by unauthenticated access with low confidentiality impact and no impact on integrity or availability, per CVSS 3.1 metric...