14051 matches found
CVE-2026-82272 Immich Locked Assets Remain Readable Through Albums and Shared Links
Immich through 3.1.0 fails to properly enforce locked asset visibility when assets are locked through the single-asset endpoint, allowing them to remain accessible through shared albums and links. Attackers can read locked assets and their metadata by accessing existing shared albums or links,...
CVE-2026-81761
Subscriber Broken Access Control in WpEvently = 5.5.0 versions...
CVE-2026-81759
Contributor Broken Access Control in WpEvently = 5.5.0 versions...
CVE-2026-81767
Unauthenticated Broken Access Control in Simple Payment = 2.5.2 versions...
CVE-2026-81284
Contributor Broken Access Control in ACF Extended = 0.9.2.6 versions...
WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.12 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Fluent Forms Pro Add On Pack versions = 6.2.12...
CVE-2026-81767 WordPress Simple Payment plugin <= 2.5.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Simple Payment = 2.5.2 versions...
CVE-2026-81761 WordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in WpEvently = 5.5.0 versions...
CVE-2026-81767
CVE-2026-81767 affects the WordPress Simple Payment plugin in versions 2.5.2 and earlier , presenting an unauthenticated Broken Access Control flaw. The CVSS 3.1 base score is 7.5 (HIGH) , with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N, indicating an attacker requires no credentials or user...
CVE-2026-81767 WordPress Simple Payment plugin <= 2.5.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Simple Payment = 2.5.2 versions...
CVE-2026-81761
WpEvently is a WordPress plugin affected by a Broken Access Control vulnerability in versions ≤ 5.5.0 . The flaw allows a Subscriber -level user to perform actions beyond their intended permissions, resulting in a low confidentiality impact with no integrity or availability loss. The CVSS 3.1 sco...
EUVD-2026-67733
Subscriber Broken Access Control in WpEvently = 5.5.0 versions...
EUVD-2026-67734
Unauthenticated Broken Access Control in Simple Payment = 2.5.2 versions...
CVE-2026-81759 WordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability
Contributor Broken Access Control in WpEvently = 5.5.0 versions...
EUVD-2026-67731
Contributor Broken Access Control in WpEvently = 5.5.0 versions...
CVE-2026-81759
WpEvently is a WordPress plugin (by Mage EventPress) affected by a Broken Access Control vulnerability in versions
EUVD-2026-67727
Contributor Broken Access Control in ACF Extended = 0.9.2.6 versions...
CVE-2026-81284
CVE-2026-81284 affects the WordPress plugin ACF Extended in versions