16354 matches found
CVE-2026-32578 WordPress ECPay Ecommerce for WooCommerce plugin <= 1.1.2606090 - Broken Access Control vulnerability
Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce = 1.1.2606090 versions...
CVE-2026-32578 WordPress ECPay Ecommerce for WooCommerce plugin <= 1.1.2606090 - Broken Access Control vulnerability
Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce = 1.1.2606090 versions...
EUVD-2026-93239
Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce = 1.1.2606090 versions...
CVE-2026-32578
The ECPay Ecommerce for WooCommerce plugin for WordPress, version
CVE-2026-25433
The WP2LEADS plugin for WordPress (versions
EUVD-2026-93228
Subscriber Broken Access Control in WP2LEADS = 3.5.7 versions...
CVE-2026-25433 WordPress WP2LEADS plugin <= 3.5.7 - Broken Access Control vulnerability
Subscriber Broken Access Control in WP2LEADS = 3.5.7 versions...
CVE-2026-25433 WordPress WP2LEADS plugin <= 3.5.7 - Broken Access Control vulnerability
Subscriber Broken Access Control in WP2LEADS = 3.5.7 versions...
CVE-2026-97300
Unauthenticated Broken Access Control in WP Event Solution = 4.1.25 versions...
CVE-2026-39789
Unauthenticated Broken Access Control in Fluent Affiliate Pro = 1.6.4 versions...
CVE-2026-39723
Missing Authorization vulnerability in Green Invoice Morning for WooCommerce wc-gateway-greeninvoice allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Morning for WooCommerce: from n/a through 2.4.1...
CVE-2026-39599
Contributor Broken Access Control in WDS MCP Content Manager = 3.10.4 versions...
CVE-2026-32582
Missing Authorization vulnerability in iatoai IATO MCP iato-mcp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IATO MCP: from n/a through 1.12.0...
CVE-2026-105072
Unauthenticated Broken Access Control in FluentBooking Pro 2.5.0 versions...
CVE-2026-35029-PoC
CVE-2026-35029 — LiteLLM /config/update 不正アクセス制御の脆弱性 Broken Access Control LiteLLM の /config/update エンドポイントは呼び出し元のロール権限をチェックしません 。有効な API Key を持つ 認証済みユーザー（管理者権限不要）はプロキシ設定を変更し、悪意のある Pass-Through エンドポイントを登録して 環境変数の窃取、任意のファイル読み取り、リモートコード実行 などの攻撃が可能です。 フィールド| 値 ---|--- CVE| CVE-2026-35029 CVSS v4.0|...
EUVD-2026-92959
Unauthenticated Broken Access Control in WP Event Solution = 4.1.25 versions...
CVE-2026-97300 WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Event Solution = 4.1.25 versions...
CVE-2026-97300 WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Event Solution = 4.1.25 versions...