EUVD-2026-52595

The Brizy WordPress plugin before 2.8.19 does not properly verify authorization on the object being modified before updating a template's type meta, validating a request parameter that is different from the one used in the write operation, allowing users with Contributor-level access and above to...

CVE-2026-16546

The affected software is the Wired Impact Volunteer Management WordPress plugin (versions before 2.8.2). The vulnerability stems from missing authorization checks in an AJAX action (likely related to wivm_remove_rsvp) and failure to verify that the RSVP being removed belongs to the requesting use...

EUVD-2026-52599

The Wired Impact Volunteer Management WordPress plugin before 2.8.2 does not have authorisation checks in one of its AJAX actions, and does not verify that the RSVP being removed belongs to the requesting user, allowing users with a role as low as Subscriber to remove arbitrary users' RSVPs from...

EUVD-2026-52590

The Easy Integration for Dropbox WordPress plugin before 2.2.0 does not perform authorization checks on several of its file-management AJAX actions that it also registers for unauthenticated users, allowing an unauthenticated attacker to list, download and upload arbitrary files across the...

CVE-2026-15958

The CVE-2026-15958 entry affects the WordPress plugin Easy Integration for Dropbox (before 2.2.0). The vulnerability arises from missing authorization checks on several file-management AJAX actions that are exposed to unauthenticated users, enabling an attacker to perform unauthenticated actions ...

EUVD-2026-52572

A vulnerability was determined in diaowen DWSurvey up to 6.14.0. The affected element is an unknown function of the file /api/dwsurvey/app/survey/up-survey-status.do of the component Survey Status Handler. This manipulation causes improper authorization. The attack may be initiated remotely. The...

EUVD-2026-52571

A vulnerability was found in diaowen DWSurvey up to 6.14.0. Impacted is the function in DwDeisgnSurveyController.devSurvey. of the file /api/dwsurvey/app/v6/dw-design-survey/dev-survey.do of the component Survey Handler. The manipulation results in authorization bypass. The attack can be launched...

CVE-2026-18722

Technical details (affected product, vulnerable component, root cause, impact, fixes) are not publicly available in the provided documents; monitor for updates.

CVE-2026-18720

A flaw has been found in kalcaddle kodbox 1.67 Build 02. This vulnerability affects unknown code of the file /index.php?plugin/msgWarning/action of the component msgWarning Plugin. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely. The explo...

CVE-2026-18720

The CVE concerns kalcaddle kodbox 1.67 Build 02, specifically the /index.php?plugin/msgWarning/action area of the msgWarning Plugin. The vulnerability allows remote, unauthenticated manipulation leading to improper authorization. Exploitation is reported as possible, with PoC exploit activity obs...

EUVD-2026-52565

A flaw has been found in kalcaddle kodbox 1.67 Build 02. This vulnerability affects unknown code of the file /index.php?plugin/msgWarning/action of the component msgWarning Plugin. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely. The explo...

EUVD-2026-52535

Missing authorization in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

EUVD-2026-52518

Adobe Campaign Classic ACC is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated privileges. Exploitation of this issue does not require user interaction...

EUVD-2026-52531

Missing authorization in Microsoft Edge Chromium-based allows an unauthorized attacker to perform tampering locally...

EUVD-2026-52486

Camaleon CMS through 2.9.2, fixed in commit 88ab703, contains a missing authorization vulnerability on the drafts endpoint that allows any authenticated low-privileged user to create draft posts by bypassing role and permission checks. Attackers can send requests to the drafts endpoint using only...

CVE-2026-48333

Adobe Campaign Classic ACC is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated privileges. Exploitation of this issue does not require user interaction...

CVE-2026-66326

Missing authorization in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-66311

Missing authorization in Microsoft Edge Chromium-based allows an unauthorized attacker to perform tampering locally...

CVE-2026-48333

CVE-2026-48333 affects Adobe Campaign Classic (ACC). The vulnerability is an Incorrect Authorization issue that could enable an attacker to attain elevated privileges. Exploitation does not require user interaction and is described with a high impact: confidentiality, integrity, and availability ...

CVE-2026-67616

CVE-2026-67616 affects Camaleon CMS up to version 2.9.2. The flaw is a missing authorization on the drafts endpoint (admin/post_type drafts) that lets any authenticated low-privileged user bypass role/permission checks to create draft posts. These unauthorized drafts appear in the administrative ...