EUVD-2026-108032

Missing Authorization vulnerability in eLightUp Falcon – WordPress Optimizations & Tweaks falcon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Falcon – WordPress Optimizations & Tweaks: from n/a through 2.12.0...

CVE-2026-112826 WordPress Falcon – WordPress Optimizations & Tweaks plugin <= 2.12.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in eLightUp Falcon – WordPress Optimizations & Tweaks falcon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Falcon – WordPress Optimizations & Tweaks: from n/a through 2.12.0...

WordPress Falcon – WordPress Optimizations & Tweaks plugin <= 2.12.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by HAIMIN in WordPress Plugin Falcon – WordPress Optimizations & Tweaks versions = 2.12.0...

WordPress Strong Testimonials plugin <= 3.3.14 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by mroccon in WordPress Plugin Strong Testimonials versions = 3.3.14...

CVE-2026-114180

The Wpmet Metform WordPress plugin (versions ≤ 4.3.2 ) is susceptible to a Missing Authorization vulnerability. This flaw allows for the exploitation of Incorrectly Configured Access Control security levels. The impact is characterized as a broken access control issue, potentially affecting the i...

EUVD-2026-108031

Missing Authorization vulnerability in Wpmet Metform metform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Metform: from n/a through 4.3.2...

CVE-2026-114180 WordPress Metform plugin <= 4.3.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Wpmet Metform metform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Metform: from n/a through 4.3.2...

CVE-2026-114180 WordPress Metform plugin <= 4.3.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Wpmet Metform metform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Metform: from n/a through 4.3.2...

CVE-2026-111847

The MarketKing (marketking-multivendor-marketplace-for-woocommerce) WordPress plugin is affected by a Missing Authorization vulnerability in versions up to and including 2.1.72 . This issue allows for Exploiting Incorrectly Configured Access Control Security Levels , which can lead to unauthorize...

EUVD-2026-108030

Missing Authorization vulnerability in Kings Plugins MarketKing marketking-multivendor-marketplace-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MarketKing: from n/a through 2.1.72...

CVE-2026-111847 WordPress MarketKing plugin <= 2.1.72 - Broken Access Control vulnerability

Missing Authorization vulnerability in Kings Plugins MarketKing marketking-multivendor-marketplace-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MarketKing: from n/a through 2.1.72...

CVE-2026-111847 WordPress MarketKing plugin <= 2.1.72 - Broken Access Control vulnerability

Missing Authorization vulnerability in Kings Plugins MarketKing marketking-multivendor-marketplace-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MarketKing: from n/a through 2.1.72...

WordPress Metform plugin <= 4.3.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Andrei in WordPress Plugin Metform versions = 4.3.2...

WordPress MarketKing plugin <= 2.1.72 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Oly Hossen in WordPress Plugin MarketKing versions = 2.1.72...

EUVD-2026-108028

Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eRoom: from n/a through 1.7.1...

cyberpanel-poc

CyberPanel v2.4 — Authenticated Privilege Escalation Chain...

CVE-2026-114570

WordPress Core is vulnerable to Stored Cross-Site Scripting via Quick Edit in all versions up to, and including, 7.0.2 due to insufficient escaping of user display names. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts i...

CVE-2026-114570 WordPress Core <= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Quick Edit

WordPress Core is vulnerable to Stored Cross-Site Scripting via Quick Edit in all versions up to, and including, 7.0.2 due to insufficient escaping of user display names. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts i...

CVE-2026-114570

WordPress Core versions up to and including 7.0.2 are vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the insufficient escaping of user display names within the Quick Edit functionality. An authenticated attacker with Contributor-level access or higher can inject arbitra...

EUVD-2026-108007

WordPress Core is vulnerable to Stored Cross-Site Scripting via Quick Edit in all versions up to, and including, 7.0.2 due to insufficient escaping of user display names. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts i...