JeecgBoot /datarule file authorization issue vulnerability

JeecgBoot is a low-code development platform that fuses code generation and AI applications to help organizations rapidly achieve low-code development and build AI applications. JeecgBoot suffers from an authorization issue vulnerability that stems from improper authorization in the file...

JeecgBoot getDeptRoleList function authorization issue vulnerability

JeecgBoot is a low-code development platform that fuses code generation and AI applications to help organizations rapidly achieve low-code development and build AI applications. JeecgBoot suffers from an authorization issue vulnerability, which stems from improper authorization of the parameter...

PT-2026-2189

Name of the Vulnerable Software and Affected Versions baqend Speed Kit versions through 2.0.2 Description A missing authorization issue exists in baqend Speed Kit due to incorrectly configured access control security levels. The issue allows exploitation of these levels. Recommendations Update to...

PT-2026-1902

Name of the Vulnerable Software and Affected Versions Shahjahan Jewel Fluent Support versions through 1.10.4 Description An authorization issue exists in Fluent Support that allows exploitation of incorrectly configured access control security levels. Recommendations Versions prior to and includi...

CVE-2025-1214

A vulnerability classified as critical has been found in pihome-shc PiHome 2.0. This affects an unknown part of the file /useraccounts.php?uid of the component Role-Based Access Control. The manipulation leads to missing authorization. It is possible to initiate the attack remotely. The exploit h...

PT-2026-1649

Name of the Vulnerable Software and Affected Versions ThemeHunk Oneline Lite versions through 6.6 Description An authorization issue exists in ThemeHunk Oneline Lite, stemming from incorrectly configured access control security levels. This allows for unauthorized access. Recommendations Update...

SUSE CVE-2025-68938

Gitea before 1.25.2 mishandles authorization for deletion of releases...

PT-2026-1486

Name of the Vulnerable Software and Affected Versions WPFunnels Creator LMS versions through 1.1.12 Description An authorization issue exists in WPFunnels Creator LMS. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized access. Recommendatio...

PT-2026-1482

Name of the Vulnerable Software and Affected Versions BBR Plugins Better Business Reviews versions through 0.1.1 Description An authorization issue exists in BBR Plugins Better Business Reviews, allowing exploitation due to incorrectly configured access control security levels. Recommendations...

PT-2026-1475

Name of the Vulnerable Software and Affected Versions AffiliateX versions through 1.3.9.3 Description An authorization issue exists in AffiliateX, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update AffiliateX to a version later than 1.3.9.3...

PT-2026-1491

Name of the Vulnerable Software and Affected Versions Cloudways Breeze versions through 2.2.21 Description An authorization issue exists in Cloudways Breeze that allows exploitation of incorrectly configured access control security levels. Recommendations Update Cloudways Breeze to a version late...

PT-2026-1474

Name of the Vulnerable Software and Affected Versions BoldGrid Post and Page Builder versions through 1.27.9 Description An authorization issue exists in BoldGrid Post and Page Builder. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized...

PT-2026-1480

Name of the Vulnerable Software and Affected Versions StellarWP The Events Calendar versions through 6.15.12.2 Description A missing authorization issue exists in StellarWP The Events Calendar, allowing exploitation of incorrectly configured access control security levels. Recommendations Update...

PT-2026-1467

Name of the Vulnerable Software and Affected Versions Car Rental Manager versions through 1.0.9 Description An authorization issue exists in Car Rental Manager that allows exploitation due to incorrectly configured access control security levels. Recommendations Update Car Rental Manager to a...

PT-2026-1481

Name of the Vulnerable Software and Affected Versions Proxy & VPN Blocker versions through 3.5.3 Description An authorization issue exists in Proxy & VPN Blocker that allows exploitation of incorrectly configured access control security levels. Recommendations Update Proxy & VPN Blocker to a...

Centreon 安全漏洞

Centreon is a set of open source system monitoring tools from the French company Centreon . The product provides monitoring capabilities for resources such as networks, systems and applications. A security vulnerability exists in Centreon versions prior to 25.10.2, 24.10.15, and 24.04.19, which...

PT-2026-1270

Name of the Vulnerable Software and Affected Versions WPweb Follow My Blog Post versions through 2.4.0 Description An authorization issue exists in WPweb Follow My Blog Post, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update WPweb Follow My...

MiniCMS 授权问题漏洞

MiniCMS is a mini content management system designed for personal websites by the individual developer of Dada bg5sbk. An authorization issue vulnerability exists in MiniCMS 1.8 and earlier versions, which stems from incorrect operation of the file /minicms/mc-admin/post.php of the component Tras...

PT-2025-54454

Name of the Vulnerable Software and Affected Versions merkulove Conformer for Elementor versions through 1.0.7 Description An authorization issue exists in merkulove Conformer for Elementor, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update...

PT-2025-54453

Name of the Vulnerable Software and Affected Versions Logger for Elementor versions through 1.0.9 Description An authorization issue exists in Logger for Elementor, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update Logger for Elementor to a...