673692 matches found
CVE-2026-105055 WordPress WP Mailster plugin <= 1.9.0.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP Mailster WP Mailster wp-mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: from n/a through 1.9.0.0...
EUVD-2026-92312
Missing Authorization vulnerability in WP Mailster WP Mailster wp-mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: from n/a through 1.9.0.0...
CVE-2026-105055
The WP Mailster plugin for WordPress, versions up to 1.9.0.0 , is vulnerable to a Broken Access Control issue. This vulnerability stems from missing authorization within the wp-mailster component, which allows for the exploitation of incorrectly configured access control security levels. The vuln...
CVE-2026-97071 WordPress CURCY plugin <= 2.2.17 - Broken Access Control vulnerability
Incorrect Calculation vulnerability in VillaTheme CURCY woo-multi-currency allows Integer Attacks.This issue affects CURCY: from n/a through 2.2.17...
CVE-2026-97071
The VillaTheme CURCY (woo-multi-currency) WordPress plugin versions up to and including 2.2.17 is vulnerable to an Incorrect Calculation vulnerability (CWE-682). This flaw allows for Integer Attacks , potentially impacting the integrity of data during currency calculations. No specific exploitati...
WordPress CURCY plugin <= 2.2.17 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by dcs in WordPress Plugin CURCY versions = 2.2.17...
WordPress WP Mailster plugin <= 1.9.0.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ratchanon Chamnankit in WordPress Plugin WP Mailster versions = 1.9.0.0...
CVE-2026-105062
The Brandtoss WP Admin Audit plugin for WordPress (versions n/a through 1.2.17 ) is vulnerable to a Missing Authorization vulnerability (CWE-862). This issue allows for exploiting incorrectly configured access control security levels . The impact is categorized as Medium severity with a CVSS3.1 s...
CVE-2026-105062 WordPress WP Admin Audit plugin <= 1.2.17 - Broken Access Control vulnerability
Missing Authorization vulnerability in Brandtoss WP Admin Audit wp-admin-audit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Admin Audit: from n/a through 1.2.17...
EUVD-2026-92309
Missing Authorization vulnerability in Brandtoss WP Admin Audit wp-admin-audit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Admin Audit: from n/a through 1.2.17...
CVE-2026-103078
The WordPress JS Help Desk plugin (specifically the js-support-ticket component) is vulnerable to an Insecure Direct Object Reference (IDOR) flaw, identified as CWE-639 . This vulnerability allows for an Authorization Bypass due to incorrectly configured access control security levels, enabling a...
CVE-2026-103078 WordPress JS Help Desk plugin <= 4.0.0 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through 4.0.0...
EUVD-2026-92308
Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk: from n/a through 4.0.0...
WordPress WP Admin Audit plugin <= 1.2.17 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Nixxies in WordPress Plugin WP Admin Audit versions = 1.2.17...
CVE-2026-41940
CVE-2026-41940: cPanel/WHM 認証バイパス 単一 & 複数ターゲット 免責事項: この文書および関連スクリプト exploit.py は、教育目的、セキュリティ研究、および許可を得たペネトレーションテスト専用に提供されます。所有していない、またはテストする明示的な許可を得ていないシステムに対してこのソフトウェアを使用しないでください。 概要 exploit.py は、cPanel & WHM における認証バイパス脆弱性 CVE-2026-41940 を実証するスクリプトです。この脆弱性により、認証されていない攻撃者が CRLF...
EUVD-2026-92304
Missing Authorization vulnerability in WPFunnels Team WP VR wpvr allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP VR: from n/a through 9.1.3...
CVE-2026-104386
The WP VR (wpvr) plugin for WordPress, versions n/a through 9.1.3 , is affected by a Broken Access Control vulnerability (CWE-862 ). The flaw allows for exploiting incorrectly configured access control security levels due to missing authorization. The impact includes potential changes to confiden...
CVE-2026-104386 WordPress WP VR plugin <= 9.1.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in WPFunnels Team WP VR wpvr allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP VR: from n/a through 9.1.3...