Lucene search
+L

165874 matches found

Cvelist
Cvelist
added yesterday14 views

CVE-2026-66595 WordPress WP Data Access plugin <= 5.5.80 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in WP Data Access = 5.5.80 versions...

5.9CVSS
SaveExploits0References1
CVE
CVE
added yesterday6 views

CVE-2026-66595

The WordPress WP Data Access plugin (versions ≤ 5.5.80) has an unauthenticated broken access control flaw allowing remote, no-auth access to restricted functionality with HIGH confidentiality impact (CVSS 5.9). No patch version or exploitation details are provided; monitor Patchstack's advisory f...

5.9CVSS5.2AI score
SaveExploits0References1
EUVD
EUVD
added yesterday5 views

EUVD-2026-63338

Unauthenticated Broken Access Control in WP Data Access = 5.5.80 versions...

5.9CVSS5.2AI score
SaveExploits0References1
Cvelist
Cvelist
added yesterday13 views

CVE-2025-53999 WordPress Altair theme <= 5.2.2 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Altair = 5.2.2 versions...

6.5CVSS
SaveExploits0References1
CVE
CVE
added yesterday8 views

CVE-2025-53999

The WordPress Altair theme (versions up to 5.2.2) has an unauthenticated broken access control flaw (CVSS 6.5, medium), exploitable remotely without credentials. An attacker can alter or disrupt functionality (low integrity/availability impact) but cannot read sensitive data. No fix version or ex...

6.5CVSS5.2AI score
SaveExploits0References1
EUVD
EUVD
added yesterday5 views

EUVD-2025-210757

Unauthenticated Broken Access Control in Altair = 5.2.2 versions...

6.5CVSS5.2AI score
SaveExploits0References1
CVE
CVE
added yesterday13 views

CVE-2025-15689

The WordPress Capella theme (≤2.5.5) allows unauthenticated remote privilege escalation with no user interaction, rated CVSS 9.8 critical. No root cause, patch version, or exploit details are provided in the documents; see the Patchstack advisory for further information. Exploitation status is no...

9.8CVSS5.3AI score
SaveExploits0References1
CVE
CVE
added yesterday8 views

CVE-2026-74021

WordPress Chaplin theme ≤2.6.8 has an unauthenticated broken access control flaw, allowing remote attackers to access restricted content (CVSS 7.5 HIGH, network/low-complexity, no auth). No patch version or exploit details are provided; update to a newer theme version when available.

7.5CVSS5.2AI score
SaveExploits0References1
EUVD
EUVD
added yesterday5 views

EUVD-2026-63328

Unauthenticated Broken Access Control in Chaplin = 2.6.8 versions...

7.5CVSS5.2AI score
SaveExploits0References1
Cvelist
Cvelist
added yesterday13 views

CVE-2026-74021 WordPress Chaplin theme <= 2.6.8 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Chaplin = 2.6.8 versions...

7.5CVSS
SaveExploits0References1
NVD
NVD
added yesterday5 views

CVE-2026-77026

Joomla Extension - tassos.gr - Client-controlled validation bypass in Convert Forms extension 5.2.5 - The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions...

6.9CVSS
SaveExploits0References1
CVE
CVE
added yesterday12 views

CVE-2026-77026

Joomla Extension - tassos.gr - Client-controlled validation bypass in Convert Forms extension 5.2.5 - The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions...

6.9CVSS5.2AI score
SaveExploits0References1
Cvelist
Cvelist
added yesterday17 views

CVE-2026-77026 Joomla Extension - tassos.gr - Client-controlled validation bypass in Convert Forms extension < 5.2.5

Joomla Extension - tassos.gr - Client-controlled validation bypass in Convert Forms extension 5.2.5 - The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions...

6.9CVSS
SaveExploits0References1
EUVD
EUVD
added yesterday8 views

EUVD-2026-63242

Joomla Extension - tassos.gr - Client-controlled validation bypass in Convert Forms extension 5.2.5 - The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions...

6.9CVSS5.3AI score
SaveExploits0References1
Patchstack
Patchstack
added yesterday6 views

WordPress Wired Impact Volunteer Management plugin < 2.8.2 - Subscriber+ Arbitrary RSVP Removal via wivm_remove_rsvp vulnerability

Subscriber+ Arbitrary RSVP Removal via wivmremoversvp vulnerability discovered by Shikhali Jamalzade in WordPress Plugin Wired Impact Volunteer Management versions 2.8.2...

4.3CVSS5.2AI score0.00152EPSS
SaveExploits0References1Affected Software1
Nuclei
Nuclei
added yesterday81 views

WAVLINK - Access Control

Wavlink WN530HG4, WN531G3, WN533A8, and WN551K are susceptible to improper access control via /cgi-bin/ExportAllSettings.sh, where a crafted POST request returns the current configuration of the device, including the administrator password. No authentication is required. The attacker must perform...

7.5CVSS7.4AI score0.07552EPSS
SaveExploits0References5
Nuclei
Nuclei
added yesterday90 views

Lin CMS Spring Boot - Default JWT Token

An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application. id: CVE-2022-32430 info: name: Lin CMS Spring Boot - Default JWT Token author: DhiyaneshDK severity: high description: | An access control issue in Lin CM...

7.5CVSS7.4AI score0.04645EPSS
SaveExploits1References3
Nuclei
Nuclei
added yesterday53 views

WAVLINK WN533A8 - Improper Access Control

WAVLINK WN533A8 M33A8.V5030.190716 is susceptible to improper access control. An attacker can obtain usernames and passwords via view-source:http://IPADDRESS/sysinit.shtml?r=52300 and searching for logincheckuser; and thereby possibly obtain sensitive information, modify data, and/or execute...

7.5CVSS7.5AI score0.20351EPSS
SaveExploits4References5
Nuclei
Nuclei
added yesterday84 views

Oracle Fusion Middleware WebCenter Sites 12.2.1.3.0 - Broken Access Control

Oracle Fusion Middleware WebCenter Sites 12.2.1.3.0 suffers from broken access control. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebCenter Sites accessible data. id: CVE-2019-2578 info: name: Oracle Fusion...

8.6CVSS7.8AI score0.72402EPSS
SaveExploits0References5
Nuclei
Nuclei
added yesterday89 views

AntD Admin - Sensitive Information Disclosure

AntD Admin has a security vulnerability that stems from Antd-admin 5.5.0 being affected by an incorrect access control vulnerability. Attackers can exploit this vulnerability to gain unauthorized access to some front-end interfaces, resulting in the leakage of sensitive information such as user...

7.5CVSS7.3AI score0.04305EPSS
SaveExploits1References3
Rows per page
Query Builder