CVE-2026-57430

CVE-2026-57430 : WordPress SEOPress PRO plugin versions ≤ 9.1.1 have a Broken Access Control vulnerability. Context: CVSS v3.1 base score 4.3 (MEDIUM); attack vector Network , complexity Low , privileges required Low , user interaction None ; impact in confidentiality, integrity, availability as ...

CVE-2026-57324

CVE-2026-57324 affects WordPress Plugin Gift4U (GIFT4U) “Gift Cards – All in One for Woo”

CVE-2026-57324

Unauthenticated Broken Access Control in GIFT4U = 1.0.10 versions...

CVE-2026-57324 WordPress GIFT4U plugin <= 1.0.10 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in GIFT4U = 1.0.10 versions...

EUVD-2026-39735

Unauthenticated Broken Access Control in Flash & HTML5 Video = 2.11.0 versions...

CVE-2026-57323

The CVE-2026-57323 entry concerns the WordPress Flash & HTML5 Video plugin (versions &lt;= 2.11.0). Affected component: the Flash & HTML5 Video functionality within the WordPress plugin. Root cause: Unauthenticated Broken Access Control, enabling access to resources without authentication. Impact...

CVE-2026-57323 WordPress Flash & HTML5 Video plugin <= 2.11.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Flash & HTML5 Video = 2.11.0 versions...

CVE-2026-56063

The CVE-2026-56063 entry documents an Unauthenticated Broken Access Control vulnerability in the WordPress plugin MailChimp Block up to version 1.1.15 . The affected component is the plugin’s access control logic, with impact described as compromising confidentiality, integrity, and availability ...

CVE-2026-56061 WordPress Subscriptions for WooCommerce plugin <= 1.9.5 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Subscriptions for WooCommerce = 1.9.5 versions...

CVE-2026-56061

CVE-2026-56061 concerns the WordPress Subscriptions for WooCommerce plugin, affected versions

EUVD-2026-39688

Unauthenticated Broken Access Control in Paymob for WooCommerce = 4.1.2 versions...

CVE-2026-56025 WordPress Paymob for WooCommerce plugin <= 4.1.2 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Paymob for WooCommerce = 4.1.2 versions...

CVE-2026-54847 WordPress Stylish Cost Calculator plugin <= 8.3.9 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Stylish Cost Calculator = 8.3.9 versions...

CVE-2026-54847

The CVE-2026-54847 entry concerns the WordPress plugin “Stylish Cost Calculator” (versions

EUVD-2026-39684

Unauthenticated Broken Access Control in Stylish Cost Calculator = 8.3.9 versions...

CVE-2026-54840 WordPress Newsletters plugin <= 4.13 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Newsletters = 4.13 versions...

CVE-2026-54846

CVE-2026-54846: Unauthenticated Broken Access Control in WordPress plugin Syncee Premium Dropshipping & Wholesale (versions

EUVD-2026-39682

Unauthenticated Broken Access Control in Newsletters = 4.13 versions...

EUVD-2026-39683

Unauthenticated Broken Access Control in Syncee Premium Dropshipping & Wholesale = 1.0.27 versions...

CVE-2026-54840

The CVE-2026-54840 entry concerns WordPress Newsletters plugin, versions up to 4.13, with an unauthenticated broken access control flaw. The connected sources confirm the affected product and vulnerability class but do not specify exact vulnerable parameters, affected data, exploit methods, or re...