CVE-2026-73377 WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Ultimate Maps by Supsystic 1.5.0 versions...

EUVD-2026-60779

Unauthenticated Broken Access Control in GiveWP = 4.16.5.1 versions...

CVE-2026-73352 WordPress GiveWP plugin <= 4.16.5.1 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in GiveWP = 4.16.5.1 versions...

CVE-2026-73352 WordPress GiveWP plugin <= 4.16.5.1 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in GiveWP = 4.16.5.1 versions...

CVE-2026-73352

Unauthenticated Broken Access Control in GiveWP = 4.16.5.1 versions...

CVE-2026-73352

The WordPress GiveWP donation plugin (versions ≤ 4.16.5.1) has an unauthenticated broken access control flaw (CVSS 6.5) discovered by Dthangws, allowing unauthorized read/write of data. Upgrade to a newer GiveWP version. PatchStack advisory: https://patchstack.com/database/wordpress/plugin/give/v...

CVE-2026-73348

GiveWP WordPress plugin versions before 4.16.6 have an unauthenticated broken access control flaw, allowing network-based attackers with no credentials to access restricted functionality (CVSS 6.5). Upgrade to 4.16.6 or later. No in-the-wild exploitation reported. Details: https://patchstack.com/...

CVE-2026-73348 WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in GiveWP 4.16.6 versions...

EUVD-2026-60777

Unauthenticated Broken Authentication in SupportCandy = 3.5.1 versions...

EUVD-2026-60776

Unauthenticated Broken Access Control in GiveWP 4.16.6 versions...

CVE-2026-73348 WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in GiveWP 4.16.6 versions...

CVE-2026-73348

Unauthenticated Broken Access Control in GiveWP 4.16.6 versions...

CVE-2026-66679

WordPress plugin Appointment Hour Booking (≤1.5.91) has an unauthenticated broken access control flaw, allowing network-based attackers to alter data or cause partial disruption. No in-the-wild exploitation is reported; updating to version 1.5.92+ is recommended.

EUVD-2026-60933

Unauthenticated Broken Access Control in Appointment Hour Booking = 1.5.91 versions...

CVE-2026-66679 WordPress Appointment Hour Booking plugin <= 1.5.91 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Appointment Hour Booking = 1.5.91 versions...

CVE-2026-66679 WordPress Appointment Hour Booking plugin <= 1.5.91 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Appointment Hour Booking = 1.5.91 versions...

CVE-2026-66679

Unauthenticated Broken Access Control in Appointment Hour Booking = 1.5.91 versions...

CVE-2026-66651 WordPress MultiVendorX plugin <= 5.0.20 - Broken Access Control vulnerability

Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MultiVendorX: from n/a through 5.0.20...

CVE-2026-66651 WordPress MultiVendorX plugin <= 5.0.20 - Broken Access Control vulnerability

Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MultiVendorX: from n/a through 5.0.20...

CVE-2026-66651

MultiVendorX WordPress plugin (versions ≤ 5.0.14) has an unauthenticated broken access control flaw. CVSS 6.5 (Medium) — network-reachable, no auth needed, low confidentiality and integrity impact. No patch version or exploit details provided; update once a fixed release is available. Monitor Pat...