EUVD-2026-60906

Unauthenticated Broken Access Control in Online Contact Widget = 1.3.0 versions...

CVE-2026-32472 WordPress Online Contact Widget plugin <= 1.3.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Online Contact Widget = 1.3.0 versions...

CVE-2026-32472 WordPress Online Contact Widget plugin <= 1.3.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Online Contact Widget = 1.3.0 versions...

CVE-2026-32472

Unauthenticated Broken Access Control in Online Contact Widget = 1.3.0 versions...

CVE-2026-28571 WordPress FormyChat plugin <= 2.15.7 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in FormyChat = 2.15.7 versions...

CVE-2026-28571

The WordPress FormyChat plugin (versions ≤ 2.15.7) has an unauthenticated broken access control vulnerability exploitable over the network with no privileges, rated CVSS 7.5 (HIGH) with high confidentiality impact. No specific root cause, affected endpoint, or fix version is provided in the docum...

CVE-2026-28571 WordPress FormyChat plugin <= 2.15.7 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in FormyChat = 2.15.7 versions...

CVE-2026-28571

Unauthenticated Broken Access Control in FormyChat = 2.15.7 versions...

EUVD-2026-60896

Unauthenticated Broken Access Control in FormyChat = 2.15.7 versions...

EUVD-2026-60892

Unauthenticated Broken Access Control in WP Sort Order = 1.3.5 versions...

CVE-2026-28567 WordPress WP Sort Order plugin <= 1.3.5 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in WP Sort Order = 1.3.5 versions...

CVE-2026-28567 WordPress WP Sort Order plugin <= 1.3.5 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in WP Sort Order = 1.3.5 versions...

CVE-2026-28567

The WordPress WP Sort Order plugin (versions ≤ 1.3.5) has an unauthenticated broken access control flaw, exploitable over the network with no credentials, exposing sensitive data (CVSS 7.5 HIGH). CISA confirms no active exploitation; upgrade to a patched version. Details at patchstack.com/databas...

CVE-2026-28567

Unauthenticated Broken Access Control in WP Sort Order = 1.3.5 versions...

CVE-2026-28191

Subscriber Privilege Escalation in The Grid = 2.7.9.1 versions...

MINI-3M7G-493X-GCR4

Bulletin has no description...

CVE-2026-16309

Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects EdoWEB: before 780-g7...

WordPress Online Contact Widget plugin <= 1.3.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Online Contact Widget versions = 1.3.0...

CVE-2026-16309 IDOR in Netiket Information Technologies' EdoWEB

Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects EdoWEB: before 780-g7...

WordPress MultiVendorX plugin <= 5.0.14 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Jakub Herman in WordPress Plugin MultiVendorX versions = 5.0.14...