604769 matches found
CVE-2026-74001
Unauthenticated Broken Authentication in User Registration & Membership Pro = 5.4.5 versions...
CVE-2026-66647
Subscriber Broken Access Control in Homlisti = 3.1.2 versions...
CVE-2026-66611
Unauthenticated Cross Site Scripting XSS in Paymob for WooCommerce = 4.1.10 versions...
CVE-2026-66612
Unauthenticated Cross Site Scripting XSS in Aora = 1.3.19 versions...
CVE-2026-66592
Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress = 4.7.11 versions...
CVE-2026-66594
Subscriber SQL Injection in WordPress Persistent Login = 3.1.0 versions...
CVE-2026-66593
Unauthenticated SQL Injection in Security & Malware scan by CleanTalk = 2.184 versions...
CVE-2026-66595
Unauthenticated Broken Access Control in WP Data Access = 5.5.80 versions...
CVE-2025-53999
Unauthenticated Broken Access Control in Altair = 5.2.2 versions...
CVE-2025-62299
HCL IntelliOps Event Management (IEM) has a least-privilege violation allowing a privileged (PR:H) network attacker to access resources beyond their original privileges, with HIGH confidentiality impact. CVSS 6.6 MEDIUM; no exploitation details or fix version provided in the documents.
EUVD-2025-210753
HCL IntelliOps Event Management IEM is affected by a least privileges violation which could allow an attacker to access the resource with the elevated privilege that could not be accessed with the attacker's original privileges...
CVE-2025-62299 HCL IntelliOps Event Management is affected by multiple security vulnerabilities.
HCL IntelliOps Event Management IEM is affected by a least privileges violation which could allow an attacker to access the resource with the elevated privilege that could not be accessed with the attacker's original privileges...
CVE-2026-7485
In Checkmk, incorrect authorization in frozen BI aggregations lets an authenticated user with restricted host/service visibility learn the names and existence of hosts and services they should not see. Affected versions: <2.5.0p2, <2.4.0p29,
CVE-2026-7485 Frozen BI aggregations leak host and service names to unauthorized users
Incorrect authorization in frozen BI aggregations in Checkmk 2.5.0p2, 2.4.0p29, 2.3.0p47, and all 2.2.0 versions allows an authenticated user with restricted host and service visibility to learn the names and the existence of hosts and services they are not authorized to see...
CVE-2026-74020 WordPress Koji theme <= 2.2.1 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Koji = 2.2.1 versions...
EUVD-2026-63320
Unauthenticated Broken Access Control in Koji = 2.2.1 versions...
CVE-2026-74020
CVE-2026-74020 is an unauthenticated Broken Access Control vulnerability in the WordPress Koji theme , affecting versions ≤ 2.2.1 . The flaw allows a remote, unauthenticated attacker to access restricted resources over the network with low complexity, resulting in a high confidentiality impact (C...
CVE-2026-74019 WordPress EPROLO Dropshipping plugin <= 2.4.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in EPROLO Dropshipping = 2.4.2 versions...
CVE-2026-74019
CVE-2026-74019 is an unauthenticated Broken Access Control vulnerability in the EPROLO Dropshipping WordPress plugin, affecting versions ≤ 2.4.2 . The vulnerability was discovered by hivesec and allows an unauthenticated attacker to access restricted functionality or data, resulting in high confi...