CVE-2026-32481 WordPress Ezoic plugin <= 2.22.11 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in Ezoic = 2.22.11 versions...

CVE-2026-32481 WordPress Ezoic plugin <= 2.22.11 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in Ezoic = 2.22.11 versions...

CVE-2026-32481

The WordPress Ezoic plugin (versions ≤ 2.22.11) contains an unauthenticated broken authentication flaw discovered by HaiND. CVSS 7.5 HIGH (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) means any remote attacker can bypass authentication and access confidential data without credentials. No fix version or i...

CVE-2026-32481

Unauthenticated Broken Authentication in Ezoic = 2.22.11 versions...

BASM (Broken Authentication & Session Management) in Jira Data Center

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-21582 was introduced in version 9.12.14, 10.3.0, and 11.3.0 of Jira Software Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.8, allows an...

WordPress Flutterwave WooCommerce plugin <= 3.3.0 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Jakub Herman in WordPress Plugin Flutterwave WooCommerce versions = 3.3.0...

WordPress Piraeus Bank WooCommerce Payment Gateway plugin 3.2.0 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Jakub Herman in WordPress Plugin Piraeus Bank WooCommerce Payment Gateway versions 3.2.0...

WordPress MWB HubSpot for WooCommerce plugin <= 1.6.7 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Jakub Herman in WordPress Plugin MWB HubSpot for WooCommerce versions = 1.6.7...

WordPress Popup by Supsystic plugin <= 1.13.0 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Asim Alshaya in WordPress Plugin Popup by Supsystic versions = 1.13.0...

WordPress SupportCandy plugin <= 3.5.1 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by hackthesoul in WordPress Plugin SupportCandy versions = 3.5.1...

PT-2026-77051

Unauthenticated Broken Authentication in Ezoic = 2.22.11 versions...

CVE-2026-32481: Authentication Bypass Using an Alternate Path or Channel

Unauthenticated Broken Authentication in Ezoic = 2.22.11 versions...

CVE-2026-73398: Authentication Bypass Using an Alternate Path or Channel

Unauthenticated Broken Authentication in Piraeus Bank WooCommerce Payment Gateway 3.2.0 versions...

PT-2026-77091

Unauthenticated Broken Authentication in SupportCandy = 3.5.1 versions...

PT-2026-77110

Unauthenticated Broken Authentication in Popup by Supsystic = 1.13.0 versions...

PT-2026-77116

Name of the Vulnerable Software and Affected Versions MWB HubSpot for WooCommerce versions prior to 1.6.8 Description The software contains a broken authentication mechanism that allows users with Subscriber privileges to bypass authentication requirements. Recommendations Update MWB HubSpot for...

PT-2026-77119

Unauthenticated Broken Authentication in Flutterwave WooCommerce = 3.3.0 versions...

CVE-2026-73399: Authentication Bypass Using an Alternate Path or Channel

Unauthenticated Broken Authentication in Flutterwave WooCommerce = 3.3.0 versions...

CVE-2026-73350: Incorrect Privilege Assignment

Unauthenticated Broken Authentication in SupportCandy = 3.5.1 versions...

CVE-2026-21582: Improper Authentication

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to perfor...