169047 matches found
CVE-2026-25427
CVE-2026-25427 affects the WordPress plugin eRoom (versions ≤ 1.7.1). The description identifies a Broken Access Control issue for subscribers, but the available documents do not provide technical details, affected files, root cause, exploitability, or remediation steps. No exploitation informati...
EUVD-2026-48149
Subscriber Broken Access Control in eRoom = 1.7.1 versions...
EUVD-2026-48148
Contributor Broken Access Control in Mediavine Control Panel = 2.10.10 versions...
WordPress Post My CF7 Form plugin <= 6.2.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Mitchell in WordPress Plugin Post My CF7 Form versions = 6.2.0...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to bypass discretionary access control via malicious network traffic. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
Insufficient policy enforcement in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted Chrome Extension. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Insufficient policy enforcement in the Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control through a crafted HTML page. Chromium security severity: Medium...
WordPress Stripe For WooCommerce plugin <= 4.0.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by timomangcut in WordPress Plugin Stripe For WooCommerce versions = 4.0.7...
RHSA-2026:43420 Red Hat Security Advisory: acl security update
Bulletin has no description...
EUVD-2026-47899
Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2 - The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions...
CVE-2026-65758
Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2 - The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions...
WordPress Qubely plugin <= 1.8.14 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Qubely versions = 1.8.14...
RLSA-2026:43420 Important: acl security update
Access Control Lists ACLs are used to define fine-grained discretionary access rights for files and directories. The acl packages contain the getfacl and setfacl utilities needed for manipulating access control lists. Security Fixes: acl: Symlink traversal privilege escalation via libacl function...
acl security update
An update is available for acl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Access Control Lists ACLs are used to define fine-grained discretionary access...
Exploit for Interpretation Conflict in Wordpress
CVE-2026-63030 / CVE-2026-60137 — "wp2shell" WordPress Core RC...
PT-2026-63912
Subscriber Broken Access Control in Query Wrangler = 1.5.57 versions...
PT-2026-63826
Unauthenticated Broken Access Control in Autopay dla WooCommerce = 2.2.27 versions...
The vulnerability of the dovecot-acl file in Dovecot and OX Dovecot Pro mail servers, due to access control deficiencies, allows attackers to trigger service interruptions.
The vulnerability of the dovecot-acl file in Dovecot and OX Dovecot Pro mail servers is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service failures...
PT-2026-63942
Unauthenticated Broken Access Control in Qubely = 1.8.14 versions...
CVE-2026-64793
Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions - Content tags could use ignore flags or property overrides to render restricted or unpublished articles or modules. A content author could thereby expose content to...