CVE-2026-1892 WeKan REST API boards.js setBoardOrgs improper authorization

A security vulnerability has been detected in WeKan up to 8.20. This affects the function setBoardOrgs of the file models/boards.js of the component REST API. Such manipulation of the argument item.cardId/item.checklistId/card.boardId leads to improper authorization. The attack may be launched...

PT-2026-6258

Name of the Vulnerable Software and Affected Versions WP Chill Passster content-protector versions through 4.2.25 Description An authorization issue exists in WP Chill Passster content-protector, stemming from incorrectly configured access control security levels. This allows for exploitation of...

PT-2026-6239

Name of the Vulnerable Software and Affected Versions Sunshine Photo Cart versions through 3.5.7.2 Description An authorization issue exists in Sunshine Photo Cart that allows exploitation of incorrectly configured access control security levels. Recommendations Update Sunshine Photo Cart to a...

PT-2026-6217

Name of the Vulnerable Software and Affected Versions Themefic Travelfic Toolkit versions through 1.3.3 Description An authorization issue exists in Themefic Travelfic Toolkit’s travelfic-toolkit, allowing exploitation of incorrectly configured access control security levels. Recommendations Upda...

PT-2026-6250

Name of the Vulnerable Software and Affected Versions Atarim versions through 4.3.1 Description An authorization issue exists in Vito Peleg Atarim atarim-visual-collaboration, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update Atarim to a...

PT-2026-6231

Name of the Vulnerable Software and Affected Versions Spectra ultimate-addons-for-gutenberg versions through 2.19.17 Description An authorization issue exists in Brainstorm Force Spectra ultimate-addons-for-gutenberg, allowing exploitation of incorrectly configured access control security levels...

PT-2026-6244

Name of the Vulnerable Software and Affected Versions ILLID Share This Image versions through 2.09 Description An authorization issue exists in ILLID Share This Image’s ‘share-this-image’ functionality. This allows exploitation due to incorrectly configured access control security levels...

PT-2026-6242

Name of the Vulnerable Software and Affected Versions Wired Impact Volunteer Management versions prior to 2.9 Description An authorization issue exists in Wired Impact Volunteer Management that allows exploitation of incorrectly configured access control security levels. Recommendations Update...

PT-2026-6216

Name of the Vulnerable Software and Affected Versions Modula Image Gallery versions through 2.13.6 Description An authorization issue exists in WP Chill Modula Image Gallery modula-best-grid-gallery. The issue involves incorrectly configured access control security levels, potentially allowing...

QRMenümPro Menu Panel Authorization Issue Vulnerability

QRMenümPro Menu Panel is a backend management panel for the intelligent menu system developed by the Turkish company QRMenümPro. The QRMenümPro Menu Panel versions dated 29012026 and earlier had an authorization issue vulnerability. This vulnerability stemmed from session fixation, which could le...

Dell OpenManage Network Integration Authorization Issues Vulnerability

Dell OpenManage Network Integration OMNI is a network integration solution provided by the American company Dell. Versions of Dell OpenManage Network Integration prior to version 3.9 had an authorization issue vulnerability. This vulnerability stemmed from improper authentication procedures and...

CVE-2026-24622

Missing Authorization vulnerability in Sergiy Dzysyak Suggestion Toolkit suggestion-toolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Suggestion Toolkit: from n/a through = 5.0...

WordPress Plugin Lawyer Directory Security Vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

CRMEB authorization issue vulnerabilities

CRMEB is an open-source Java e-commerce system developed by CRMEB. Versions of CRMEB 5.6.3 and earlier contained a vulnerability related to authorization issues. This vulnerability stemmed from incorrect handling of the parameter openId in the file crmeb/app/api/controller/v1/LoginController.php,...

CRMEB authorization issue vulnerabilities

CRMEB is an open-source Java e-commerce system developed by CRMEB. Versions of CRMEB 5.6.3 and earlier contained a vulnerability related to authorization issues. This vulnerability stemmed from incorrect handling of the parameter ‘uid’ in the component’s JSON Token Handler file,...

PHPGurukul News Portal Authorization Issue Vulnerability

PHPGurukul News Portal is a news portal website operated by PHPGurukul Corporation. Version 1.0 of PHPGurukul News Portal has an authorization issue vulnerability. This vulnerability stems from incorrect handling of the admin/add-subadmins.php file, which may lead to improper authorization settin...

Chamilo LMS authorization issue vulnerability

Chamilo LMS is an open-source online learning and collaboration system developed by Chamilo. This system supports the creation of teaching content, remote training, and online quizzes. Chamilo LMS versions 2.0.0 Beta 1 and earlier had an authorization issue vulnerability. This vulnerability stemm...

Security Bulletin: Remediation of Multiple Spring Vulnerabilities in IBM Library Support for Spring

Summary Multiple Spring Vulnerabilities have been addressed in IBM Library Support for Spring Vulnerability Details CVEID:CVE-2025-41249 DESCRIPTION: The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized...

CVE-2026-21274

Dreamweaver Desktop versions 21.6 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could leverage this vulnerability to bypass security measures and execute unauthorized code...

CVE-2025-11669

Zohocorp ManageEngine PAM360 versions before 8202; Password Manager Pro versions before 13221; Access Manager Plus versions prior to 4401 are vulnerable to an authorization issue in the initiate remote session functionality...