PT-2026-81054

Unauthenticated Broken Authentication in WPLegalPages = 3.7.0 versions...

CVE-2026-78259: Authentication Bypass Using an Alternate Path or Channel

Unauthenticated Broken Authentication in WPLegalPages = 3.7.0 versions...

CVE-2026-74001

Unauthenticated Broken Authentication in User Registration & Membership Pro = 5.4.5 versions...

CVE-2026-66677

Subscriber Broken Authentication in Leyka = 3.32.3 versions...

CVE-2026-74001 WordPress User Registration & Membership Pro plugin <= 5.4.5 - Account Takeover vulnerability

Unauthenticated Broken Authentication in User Registration & Membership Pro = 5.4.5 versions...

CVE-2026-74001 WordPress User Registration & Membership Pro plugin <= 5.4.5 - Account Takeover vulnerability

Unauthenticated Broken Authentication in User Registration & Membership Pro = 5.4.5 versions...

EUVD-2026-63314

Unauthenticated Broken Authentication in User Registration & Membership Pro = 5.4.5 versions...

CVE-2026-74001

User Registration & Membership Pro is a WordPress plugin affected by an unauthenticated broken authentication vulnerability in versions ≤ 5.4.5 , enabling account takeover without any prior credentials. The flaw was discovered by 0xd4rk5id3 and carries a CVSS 3.1 score of 9.8 (CRITICAL) with a ne...

EUVD-2026-63305

Subscriber Broken Authentication in Leyka = 3.32.3 versions...

CVE-2026-66677

CVE-2026-66677 is a Broken Authentication vulnerability in the WordPress plugin Leyka affecting versions

CVE-2026-66677 WordPress Leyka plugin <= 3.32.3 - Broken Authentication vulnerability

Subscriber Broken Authentication in Leyka = 3.32.3 versions...

Vulnerabilities are hidden in Zabbix

Zabbix SIA has identified several vulnerabilities in Zabbix, including the API, frontend, script items, preprocessing components, and the Windows Agent installer. These vulnerabilities affect various aspects of Zabbix. - A problem with the login lockout mechanism causes multiple simultaneous fail...

PT-2026-78978

Name of the Vulnerable Software and Affected Versions Leyka versions prior to 3.32.4 Description Broken authentication exists for subscribers, allowing potential unauthorized access to accounts. Recommendations Update to a version newer than 3.32.3...

CVE-2026-66677: Authentication Bypass Using an Alternate Path or Channel

Subscriber Broken Authentication in Leyka = 3.32.3 versions...

PT-2026-78987

Unauthenticated Broken Authentication in User Registration & Membership Pro = 5.4.5 versions...

CVE-2026-74001: Authentication Bypass Using an Alternate Path or Channel

Unauthenticated Broken Authentication in User Registration & Membership Pro = 5.4.5 versions...

WordPress Leyka plugin <= 3.32.3 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Jakub Herman in WordPress Plugin Leyka versions = 3.32.3...

WordPress Taxi Booking Manager for WooCommerce plugin < 2.0.8 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Thaer Assfour in WordPress Plugin Taxi Booking Manager for WooCommerce versions 2.0.8...

EUVD-2026-62206

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to perfor...

BASM (Broken Authentication & Session Management) Bouncy Castle Dependency in Crowd Data Center and Server

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-12803 was introduced in 6.1.0 and later of Crowd Data Center and Server. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...