CVE-2026-115195

A broken access control vulnerability exists in the Mautic Stats API /api/stats/table. The endpoint did not enforce permissions for several internal tables: an intended administrator-only restriction was never applied, and tables without an explicit permission mapping were readable by default. As...

CVE-2026-115195

A broken access control vulnerability exists in the Mautic Stats API (/api/stats/{table}). The endpoint fails to enforce permissions for several internal tables because administrator-only restrictions were not applied and tables without explicit permission mappings are readable by default. Conseq...

CVE-2026-115195

A broken access control vulnerability exists in the Mautic Stats API /api/stats/table. The endpoint did not enforce permissions for several internal tables: an intended administrator-only restriction was never applied, and tables without an explicit permission mapping were readable by default. As...

EUVD-2026-109799

A broken access control vulnerability exists in the Mautic Stats API /api/stats/table. The endpoint did not enforce permissions for several internal tables: an intended administrator-only restriction was never applied, and tables without an explicit permission mapping were readable by default. As...

CVE-2026-115595 WordPress Contact Form by Supsystic plugin <= 1.10.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Supsystic Contact Form by Supsystic contact-form-by-supsystic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form by Supsystic: from n/a through 1.10.7...

CVE-2026-115595

The Contact Form by Supsystic WordPress plugin (versions up to and including 1.10.7 ) is vulnerable to a Broken Access Control issue (CWE-862). This Missing Authorization vulnerability allows for the exploitation of Incorrectly Configured Access Control Security Levels . No specific remediation o...

CVE-2026-115959 WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5...

CVE-2026-115959

The APIExperts Square for WooCommerce plugin for WordPress (versions up to and including 4.7.5 ) is vulnerable to a Broken Access Control issue. The root cause is a Missing Authorization vulnerability where the software fails to properly enforce security levels, allowing attackers to exploit inco...

CVE-2026-115960 WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5...

CVE-2026-115960

The APIExperts Square for WooCommerce plugin (versions n/a through 4.7.5 ) is vulnerable to a Broken Access Control issue caused by Missing Authorization (CWE-862). The vulnerability allows an attacker to exploit incorrectly configured access control security levels within the woosquare component...

WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by mroccon in WordPress Plugin APIExperts Square for WooCommerce versions = 4.7.5...

WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by mroccon in WordPress Plugin APIExperts Square for WooCommerce versions = 4.7.5...

WordPress Contact Form by Supsystic plugin <= 1.10.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mert Ural in WordPress Plugin Contact Form by Supsystic versions = 1.10.7...

CVE-2026-115954 WordPress Geo Mashup plugin <= 1.13.22 - Broken Access Control vulnerability

Missing Authorization vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Geo Mashup: from n/a through 1.13.22...

CVE-2026-115954

The Geo Mashup plugin for WordPress (versions up to and including 1.13.22 ) is vulnerable to a Broken Access Control flaw (CWE-862) due to Missing Authorization . This security weakness allows for the exploitation of incorrectly configured access control security levels . The vulnerability has a ...

WordPress Geo Mashup plugin <= 1.13.22 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by M. Bal-Ghaoui medblgsec in WordPress Plugin Geo Mashup versions = 1.13.22...

CVE-2026-115949 WordPress Better Post & Filter Widgets for Elementor plugin <= 1.9.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Smart Widgets Better Post & Filter Widgets for Elementor better-post-filter-widgets-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Better Post & Filter Widgets for Elementor: from n/a through 1.9.1...

CVE-2026-115949

The WP Smart Widgets Better Post & Filter Widgets for Elementor plugin (versions up to and including 1.9.1 ) is susceptible to a Missing Authorization vulnerability. This security flaw allows for the exploitation of Incorrectly Configured Access Control Security Levels , potentially leading to un...

WordPress Better Post & Filter Widgets for Elementor plugin <= 1.9.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Oly Hossen in WordPress Plugin Better Post & Filter Widgets for Elementor versions = 1.9.1...

CVE-2026-115614 WordPress Booking and Rental Manager plugin <= 2.8.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Magepeople inc. Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Manager: from n/a through 2.8.2...