CVE-2025-25621

CVE-2025-25621 Unifiedtransform v2.0 es vulnerable a un Control de Acceso Incorrecto, lo que permite a los profesores tomar asistencia de otros profesores a través del endpoint /courses/teacher/index?teacherid=2&semesterid=1. Vendor: Unifiedtransform PoC Paso 1: Inicie sesión en la aplicación com...

CVE-2026-1375

CVE-2026-1375: IDOR autenticado / Control de acceso roto en el plugin Tutor LMS Aviso: Este repositorio se crea solo con fines educativos y divulgación ética. La vulnerabilidad ha sido reportada de manera responsable al proveedor y ya ha sido parcheada. No utilice esta información para explotar...

cve-2026-86060

CVE-2026-86060 — Escalada de privilegios preautenticación en SSH de MikroTik RouterOS hasta el control administrativo total...

CVE-2025-25616

CVE-2025-25616 Unifiedtransform v2.0 es vulnerable a un Control de Acceso Incorrecto, permitiendo a los estudiantes modificar las reglas de los exámenes. El endpoint afectado es /exams/edit-rule?examruleid=1. Vendor: Unifiedtransform PoC Paso 1: Inicie sesión en la aplicación como Estudiante. Pas...

NPM: Tina: [Broken Access Control] letting any TinaCloud user authorize against any self-hosted site

NPM: Tina: Broken Access Control letting any TinaCloud user authorize against any self-hosted site vulnerability discovered by ? in WordPress Npm next-tinacms-azure versions = 15.0.0...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start root@kitploit: Download the Repo = run npm i Afer Installing all dependency just run the application root@kitploit: node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4...

CVE-2026-78528

Unauthenticated Broken Access Control in BerqWP = 4.1.15 versions...

CVE-2026-74002

Unauthenticated Broken Access Control in Booking Calendar = 11.7 versions...

CVE-2026-74017

Unauthenticated Broken Access Control in User Registration = 5.2.7 versions...

CVE-2026-74000

Contributor Broken Access Control in Simple Membership = 4.8.2 versions...

CVE-2026-66676

Unauthenticated Broken Access Control in Easy Invoice = 2.3.8 versions...

EUVD-2026-81520

Unauthenticated Broken Access Control in BerqWP = 4.1.15 versions...

CVE-2026-78528

CVE-2026-78528 affects the WordPress plugin BerqWP in versions 4.1.15 and earlier . The vulnerability is an unauthenticated Broken Access Control flaw, discovered by z3r0s , meaning any remote user can exploit it without prior authentication. The CVSS 3.1 score is 5.3 (MEDIUM) , with a vector of ...

CVE-2026-74017

WordPress User Registration plugin versions ≤ 5.2.7 contain an unauthenticated Broken Access Control vulnerability. The flaw allows a remote attacker with no prior privileges to access data they should not, resulting in a low confidentiality impact with no impact on integrity or availability. The...

EUVD-2026-81517

Unauthenticated Broken Access Control in User Registration = 5.2.7 versions...

CVE-2026-74002

CVE-2026-74002 is an unauthenticated Broken Access Control vulnerability in the WordPress Booking Calendar plugin , affecting versions 11.7 and earlier . The flaw was discovered by Ananda Dhakal via Patchstack and carries a CVSS 3.1 score of 5.3 (MEDIUM) , with low integrity impact and no impact ...

EUVD-2026-81515

Unauthenticated Broken Access Control in Booking Calendar = 11.7 versions...

CVE-2026-74000

CVE-2026-74000 affects the WordPress Simple Membership plugin in versions ≤ 4.8.2 . The vulnerability is a Broken Access Control flaw discovered by Ananda Dhakal (Patchstack). The CVSS 3.1 score is 5.3 (Medium) with the vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N , indicating a network-exploitable...

EUVD-2026-81514

Contributor Broken Access Control in Simple Membership = 4.8.2 versions...

CVE-2026-66676

CVE-2026-66676 is an unauthenticated Broken Access Control vulnerability in the WordPress Easy Invoice plugin, affecting versions 2.3.8 and below . The vulnerability was discovered by Rahul Yadav and allows a remote attacker to access data with low confidentiality impact (CVSS 3.1: 5.3 MEDIUM ). ...