1167 matches found
WordPress GiveWP plugin <= 4.16.9 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by Abdelrhman Allam in WordPress Plugin GiveWP versions = 4.16.9...
CVE-2026-86678 Broken Authentication vulnerability
ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to obtain an administrator’s API key and use it to perform administrator-level actions...
CVE-2026-86678 Broken Authentication vulnerability
ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to obtain an administrator’s API key and use it to perform administrator-level actions...
CVE-2026-86677 Broken Authentication vulnerability
ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to run unauthorized SQL commands, potentially gaining administrator access and remote code execution...
CVE-2026-86677 Broken Authentication vulnerability
ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to run unauthorized SQL commands, potentially gaining administrator access and remote code execution...
CVE-2026-86683 Broken Authentication Vulnerability
ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to change the proxy settings...
CVE-2026-86683 Broken Authentication Vulnerability
ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to change the proxy settings...
PT-2026-96900
Name of the Vulnerable Software and Affected Versions mcp-atlassian versions prior to 0.22.0 Description The HTTP transport in mcp-atlassian accepts requests without a verified user identity. When no valid user token is provided, the system falls back to using the operator's globally configured...
Atlassian Jira Service Management Data Center and Server 10.3.x < 10.3.24 / 11.3.x < 11.3.10 (JSDSERVER-16729)
The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16729 advisory. - This High severity BASM Broken Authentication & Session Management vulnerability known as...
CVE-2026-62108
Unauthenticated Broken Authentication in Headless Single Sign On = 1.7.0 versions...
CVE-2026-62101
Unauthenticated Broken Authentication in EduAdmin Booking = 5.4.2 versions...
CVE-2026-62108 WordPress Headless Single Sign On plugin <= 1.7.0 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in Headless Single Sign On = 1.7.0 versions...
CVE-2026-62108
CVE-2026-62108 is an unauthenticated Broken Authentication vulnerability in the Headless Single Sign On WordPress plugin, affecting versions 1.7.0 and earlier . Discovered by Joost Grunwald and scored 9.8 (CRITICAL) via CVSS 3.1 (network vector, no privileges or user interaction required, high im...
CVE-2026-62108 WordPress Headless Single Sign On plugin <= 1.7.0 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in Headless Single Sign On = 1.7.0 versions...
EUVD-2026-81491
Unauthenticated Broken Authentication in Headless Single Sign On = 1.7.0 versions...
CVE-2026-62101
An unauthenticated Broken Authentication vulnerability affects the WordPress EduAdmin Booking plugin in versions ≤ 5.4.2 . The flaw allows a remote attacker with no prior access to bypass authentication, with a CVSS 3.1 score of 9.8 (Critical) — network vector, low complexity, no privileges or us...
CVE-2026-62101 WordPress EduAdmin Booking plugin <= 5.4.2 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in EduAdmin Booking = 5.4.2 versions...
EUVD-2026-81489
Unauthenticated Broken Authentication in EduAdmin Booking = 5.4.2 versions...
