169299 matches found
EUVD-2026-70567
Unauthenticated Broken Access Control in Quick Event Manager = 9.17 versions...
CVE-2026-84847
CVE-2026-84847 affects the WordPress Quick Event Manager plugin in versions 9.17 and earlier . The vulnerability is an unauthenticated Broken Access Control flaw, meaning an attacker with no prior access can exploit it over the network with low complexity and no user interaction. The CVSS 3.1 sco...
EUVD-2026-70571
Subscriber Broken Access Control in Agentimus – AI SEO, llms.txt & MCP for AI Agents = 1.51.0 versions...
CVE-2026-84779
Agentimus – AI SEO, llms.txt & MCP for AI Agents WordPress plugin versions
CVE-2026-84779 WordPress Agentimus – AI SEO, llms.txt & MCP for AI Agents plugin <= 1.51.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in Agentimus – AI SEO, llms.txt & MCP for AI Agents = 1.51.0 versions...
CVE-2026-84758
An unauthenticated Broken Access Control vulnerability affects the WordPress Business Directory plugin in versions 6.4.26 and earlier . A remote attacker with no prior access can exploit this flaw over the network with low complexity and no user interaction, resulting in low integrity and low ava...
CVE-2026-84758 WordPress Business Directory plugin <= 6.4.26 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Business Directory = 6.4.26 versions...
EUVD-2026-70584
Unauthenticated Broken Access Control in Business Directory = 6.4.26 versions...
EUVD-2026-70586
Subscriber Privilege Escalation in WCFM Membership = 2.11.11 versions...
EUVD-2026-70588
Unauthenticated Broken Access Control in WPFunnels = 3.12.13 versions...
CVE-2026-84754 WordPress WPFunnels plugin <= 3.12.13 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WPFunnels = 3.12.13 versions...
CVE-2026-84755
Mail Mint is a WordPress plugin affected by an unauthenticated Broken Access Control vulnerability in versions 1.31.0 and below . The flaw allows a remote attacker with no prior access to perform unauthorized actions on the plugin, resulting in low confidentiality and low integrity impact with no...
EUVD-2026-70587
Unauthenticated Broken Access Control in Mail Mint = 1.31.0 versions...
CVE-2026-84754
CVE-2026-84754 affects the WordPress WPFunnels plugin in versions ≤ 3.12.13 , where an unauthenticated broken access control flaw allows a remote attacker to manipulate integrity and availability of the target system without any user interaction. The CVSS 3.1 score is 6.5 (MEDIUM) with a vector o...
CVE-2026-84755 WordPress Mail Mint plugin <= 1.31.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Mail Mint = 1.31.0 versions...
CVE-2026-84238
CVE-2026-84238 affects the YITH Request a Quote for WooCommerce Premium WordPress plugin in versions prior to 4.46.0 . The vulnerability is an unauthenticated Broken Access Control flaw, meaning an attacker can exploit it over the network without any prior access or user interaction. The CVSS 3.1...
EUVD-2026-70563
Unauthenticated Broken Access Control in YITH Request a Quote for WooCommerce Premium 4.46.0 versions...
CVE-2026-84238 WordPress YITH Request a Quote for WooCommerce Premium plugin < 4.46.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in YITH Request a Quote for WooCommerce Premium 4.46.0 versions...
CVE-2026-84215
CVE-2026-84215 affects the WordPress Timetics plugin in versions 1.0.61 and earlier . The vulnerability is an unauthenticated Broken Access Control flaw, rated CVSS 6.5 (Medium) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L. This means an unauthenticated network-based attacker can exploit ...