1171 matches found
WordPress WP Event SOlution plugin <= 4.1.9 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by Evan NR in WordPress Plugin WP Event SOlution versions = 4.1.9...
WordPress Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin <= 1.9.0 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by Jakub Herman in WordPress Plugin Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder versions = 1.9.0...
BASM (Broken Authentication & Session Management) in Crowd Data Center
This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to perfor...
PT-2026-68574
Name of the Vulnerable Software and Affected Versions Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce versions prior to 4.2.0 Description The plugin is subject to broken authentication due to a missing capability check within a function. This flaw allows unauthenticated...
BASM (Broken Authentication & Session Management) org.eclipse.jetty:jetty-security Dependency in Crucible Server
This High severity BASM Broken Authentication & Session Management vulnerability was introduced in version 4.9.0 of Crucible Server. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...
BASM (Broken Authentication & Session Management) org.springframework.security:spring-security-web Dependency in Crowd Data Center
This High severity BASM Broken Authentication & Session Management vulnerability was introduced in versions 6.0.0, 6.1.0, 6.2.0, 6.3.0, 7.0.0, 7.1.0, and 7.2.0 of Crowd Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.1 and a CVSS Vector of...
WordPress Super Socializer plugin <= 7.14.5 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by HaiND in WordPress Plugin Super Socializer versions = 7.14.5...
Video Conferencing with Zoom API < 4.6.6 - Unauthenticated SDK Signature Generation Detection
Zoom WordPress plugin 4.6.6 contains a broken authentication caused by disabled nonce verification in an AJAX handler, letting unauthenticated attackers generate valid Zoom SDK signatures and retrieve the Zoom SDK key. !/usr/bin/env python3 -- coding: utf-8 -- """Zoom WordPress plugin 4.""" from...
PT-2026-68543
Name of the Vulnerable Software and Affected Versions Super Socializer versions prior to 7.14.6 Description The Super Socializer plugin for WordPress contains a broken authentication flaw. This issue occurs due to a missing capability check within a function, allowing unauthenticated attackers to...
EUVD-2026-49216
Subscriber Broken Authentication in Hide My WP Ghost = 7.0.06 versions...
CVE-2026-59546: Authorization Bypass Through User-Controlled Key
Subscriber Broken Authentication in Hide My WP Ghost = 7.0.06 versions...
Atlassian Jira Service Management Data Center and Server 10.0.x / 10.1.1 / 10.2.x / 10.3.x < 10.3.7 / 10.4.x / 10.5.x / 10.6.x / 11.x < 11.3.8 (JSDSERVER-16652)
The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16652 advisory. - This High severity BASM Broken Authentication & Session Management vulnerability was introduced in...
CVE-2026-59554
Unauthenticated Broken Authentication in Ziina = 1.2.21 versions...
CVE-2026-59545
Unauthenticated Broken Authentication in miniOrange Discord Integration = 2.2.4 versions...
CVE-2026-59524
Unauthenticated Broken Authentication in Easy Digital Downloads = 3.6.7 versions...
EUVD-2026-48200
Unauthenticated Broken Authentication in Ziina = 1.2.21 versions...
CVE-2026-59554 WordPress Ziina plugin <= 1.2.21 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in Ziina = 1.2.21 versions...
CVE-2026-59554 WordPress Ziina plugin <= 1.2.21 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in Ziina = 1.2.21 versions...
