714133 matches found
WordPress Strong Testimonials plugin <= 3.3.14 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by mroccon in WordPress Plugin Strong Testimonials versions = 3.3.14...
EUVD-2026-108031
Missing Authorization vulnerability in Wpmet Metform metform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Metform: from n/a through 4.3.2...
CVE-2026-114180 WordPress Metform plugin <= 4.3.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Wpmet Metform metform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Metform: from n/a through 4.3.2...
CVE-2026-114180 WordPress Metform plugin <= 4.3.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Wpmet Metform metform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Metform: from n/a through 4.3.2...
CVE-2026-114180
The Wpmet Metform WordPress plugin (versions ≤ 4.3.2 ) is susceptible to a Missing Authorization vulnerability. This flaw allows for the exploitation of Incorrectly Configured Access Control security levels. The impact is characterized as a broken access control issue, potentially affecting the i...
EUVD-2026-108030
Missing Authorization vulnerability in Kings Plugins MarketKing marketking-multivendor-marketplace-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MarketKing: from n/a through 2.1.72...
CVE-2026-111847 WordPress MarketKing plugin <= 2.1.72 - Broken Access Control vulnerability
Missing Authorization vulnerability in Kings Plugins MarketKing marketking-multivendor-marketplace-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MarketKing: from n/a through 2.1.72...
CVE-2026-111847 WordPress MarketKing plugin <= 2.1.72 - Broken Access Control vulnerability
Missing Authorization vulnerability in Kings Plugins MarketKing marketking-multivendor-marketplace-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MarketKing: from n/a through 2.1.72...
CVE-2026-111847
The MarketKing (marketking-multivendor-marketplace-for-woocommerce) WordPress plugin is affected by a Missing Authorization vulnerability in versions up to and including 2.1.72 . This issue allows for Exploiting Incorrectly Configured Access Control Security Levels , which can lead to unauthorize...
WordPress Metform plugin <= 4.3.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Andrei in WordPress Plugin Metform versions = 4.3.2...
WordPress MarketKing plugin <= 2.1.72 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Oly Hossen in WordPress Plugin MarketKing versions = 2.1.72...
EUVD-2026-108028
Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eRoom: from n/a through 1.7.1...
cyberpanel-poc
CyberPanel v2.4 — Authenticated Privilege Escalation Chain...
CVE-2026-114570
WordPress Core is vulnerable to Stored Cross-Site Scripting via Quick Edit in all versions up to, and including, 7.0.2 due to insufficient escaping of user display names. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts i...
CVE-2026-114570 WordPress Core <= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Quick Edit
WordPress Core is vulnerable to Stored Cross-Site Scripting via Quick Edit in all versions up to, and including, 7.0.2 due to insufficient escaping of user display names. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts i...
CVE-2026-114570 WordPress Core <= 7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Quick Edit
WordPress Core is vulnerable to Stored Cross-Site Scripting via Quick Edit in all versions up to, and including, 7.0.2 due to insufficient escaping of user display names. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts i...
CVE-2026-114570
WordPress Core versions up to and including 7.0.2 are vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the insufficient escaping of user display names within the Quick Edit functionality. An authenticated attacker with Contributor-level access or higher can inject arbitra...
EUVD-2026-108007
WordPress Core is vulnerable to Stored Cross-Site Scripting via Quick Edit in all versions up to, and including, 7.0.2 due to insufficient escaping of user display names. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts i...
EUVD-2026-107678
GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allowed an authenticated to bypass a required merge request approval policy on a protected branch due to improper access...