16321 matches found
WordPress Core <= 7.1.2 - Author+ Broken Access Control to Sticky Posts via REST API vulnerability
Author+ Broken Access Control to Sticky Posts via REST API vulnerability discovered by Anthropic in WordPress core versions = 7.1.2...
thm-cybersec-portfolio
TryHackMe Notes — Cybersecurity Portfolio Personal notes and summaries of completed TryHackMe rooms. Built as a study reference and portfolio for IT security roles. Completed Rooms | Room| Topic ---|---|--- 01| Linux Privilege Escalation| Linux privesc techniques 02| Sudo Buffer Overflow|...
CVE-2026-95526
Unauthenticated Broken Access Control in BEAR = 1.2.2 versions...
CVE-2026-66588
Unauthenticated Broken Access Control in The7 = 14.2.2 versions...
CVE-2026-62072
Subscriber Broken Access Control in Progress Planner = 1.10.0 versions...
CVE-2026-42638
Missing Authorization vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through 3.7.1...
CVE-2026-48199
Unauthenticated Broken Access Control in Sermon'e = 1.0.2 versions...
CVE-2026-41560
Unauthenticated Broken Access Control in WXD Backup Lite = 1.0.2 versions...
CVE-2026-39796
Unauthenticated Broken Access Control in Advanced Posts Listing – Show Post List Easily = 1.0.8 versions...
CVE-2026-39794
Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API = 1.6.3 versions...
CVE-2026-39787
Unauthenticated Broken Access Control in 10Web Social Photo Feed = 1.4.35 versions...
CVE-2026-39762
Missing Authorization vulnerability in Patterns In The Cloud Autoship Cloud for WooCommerce Subscription Products autoship-cloud allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Autoship Cloud for WooCommerce Subscription Products: from n/a through 2.17.1...
CVE-2026-39749
Subscriber Broken Access Control in App for Cloudflare® = 1.10.1 versions...
CVE-2026-39751
Unauthenticated Broken Access Control in PayPlug for WooCommerce Official = 3.1.0 versions...
CVE-2026-39730
Missing Authorization vulnerability in Marcin Wise Chat wise-chat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wise Chat: from n/a through 3.4.3...
CVE-2026-32578
Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce = 1.1.2606090 versions...
CVE-2026-25433
Subscriber Broken Access Control in WP2LEADS = 3.5.7 versions...
CVE-2026-105059
Subscriber Broken Access Control in Delete All Comments of wordpress = 7.1 versions...