CVE-2026-112312

Missing Authorization vulnerability in ACF Extended ACF Extended acf-extended allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ACF Extended: from n/a through 0.9.2.7...

CVE-2026-111842

Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through 3.7.5...

CVE-2026-110893

Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureDash: from n/a through 1.12.2...

CVE-2026-110894

Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureDash: from n/a through 1.12.2...

Vulnerabilities in Oracle JD Edwards EnterpriseOne

Oracle has identified several vulnerabilities in Oracle JD Edwards EnterpriseOne Tools, specifically in versions 9.2.0.0 through 9.2.26.5. These vulnerabilities allow attackers to gain access to the system using various network protocols such as HTTP, HTTPS, and SMTP, either without authenticatio...

CVE-2026-114699

The ЮKassa для WooCommerce WordPress plugin (versions

CVE-2026-114699 WordPress ЮKassa для WooCommerce plugin <= 2.17.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in yoomoney ЮKassa для WooCommerce yookassa allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ЮKassa для WooCommerce: from n/a through 2.17.3...

EUVD-2026-108080

Missing Authorization vulnerability in yoomoney ЮKassa для WooCommerce yookassa allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ЮKassa для WooCommerce: from n/a through 2.17.3...

CVE-2026-114699 WordPress ЮKassa для WooCommerce plugin <= 2.17.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in yoomoney ЮKassa для WooCommerce yookassa allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ЮKassa для WooCommerce: from n/a through 2.17.3...

WordPress ЮKassa для WooCommerce plugin <= 2.17.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Sanjeev Kumar in WordPress Plugin ЮKassa для WooCommerce versions = 2.17.3...

CVE-2026-112218

The Ahmad Majestic Support (majestic-support) WordPress plugin is vulnerable to a Missing Authorization vulnerability in versions up to and including 1.2.1 . This flaw allows for exploiting incorrectly configured access control security levels . The impact of this broken access control is categor...

CVE-2026-112218 WordPress Majestic Support plugin <= 1.2.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from n/a through 1.2.1...

EUVD-2026-108077

Missing Authorization vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from n/a through 1.2.1...

CVE-2026-112218 WordPress Majestic Support plugin <= 1.2.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from n/a through 1.2.1...

CVE-2026-114696

The miniOrange Page Restriction WordPress (WP) plugin (versions up to and including 1.6.0 ) contains a Missing Authorization vulnerability. This security flaw allows for the exploitation of incorrectly configured access control security levels , potentially bypassing intended restrictions. Exploi...

CVE-2026-114696 WordPress Page Restriction WordPress (WP) plugin <= 1.6.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in miniOrange Page Restriction WordPress WP page-and-post-restriction allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Page Restriction WordPress WP: from n/a through 1.6.0...

EUVD-2026-108076

Missing Authorization vulnerability in miniOrange Page Restriction WordPress WP page-and-post-restriction allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Page Restriction WordPress WP: from n/a through 1.6.0...

CVE-2026-114696 WordPress Page Restriction WordPress (WP) plugin <= 1.6.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in miniOrange Page Restriction WordPress WP page-and-post-restriction allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Page Restriction WordPress WP: from n/a through 1.6.0...

CVE-2026-111842

The Sunshine Photo Cart WordPress plugin, in versions up to and including 3.7.5 , contains a Missing Authorization vulnerability (CWE-862). This flaw allows for Exploiting Incorrectly Configured Access Control Security Levels . The impact of this broken access control is categorized as a MEDIUM s...

CVE-2026-111842 WordPress Sunshine Photo Cart plugin <= 3.7.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through 3.7.5...