CVE-2026-32578 WordPress ECPay Ecommerce for WooCommerce plugin <= 1.1.2606090 - Broken Access Control vulnerability

Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce = 1.1.2606090 versions...

CVE-2026-32578 WordPress ECPay Ecommerce for WooCommerce plugin <= 1.1.2606090 - Broken Access Control vulnerability

Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce = 1.1.2606090 versions...

EUVD-2026-93239

Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce = 1.1.2606090 versions...

CVE-2026-32578

The ECPay Ecommerce for WooCommerce plugin for WordPress, version

CVE-2026-25433

The WP2LEADS plugin for WordPress (versions

EUVD-2026-93228

Subscriber Broken Access Control in WP2LEADS = 3.5.7 versions...

CVE-2026-25433 WordPress WP2LEADS plugin <= 3.5.7 - Broken Access Control vulnerability

Subscriber Broken Access Control in WP2LEADS = 3.5.7 versions...

CVE-2026-25433 WordPress WP2LEADS plugin <= 3.5.7 - Broken Access Control vulnerability

Subscriber Broken Access Control in WP2LEADS = 3.5.7 versions...

CVE-2026-97300

Unauthenticated Broken Access Control in WP Event Solution = 4.1.25 versions...

CVE-2026-39789

Unauthenticated Broken Access Control in Fluent Affiliate Pro = 1.6.4 versions...

CVE-2026-39723

Missing Authorization vulnerability in Green Invoice Morning for WooCommerce wc-gateway-greeninvoice allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Morning for WooCommerce: from n/a through 2.4.1...

CVE-2026-32582

Missing Authorization vulnerability in iatoai IATO MCP iato-mcp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IATO MCP: from n/a through 1.12.0...

CVE-2026-39599

Contributor Broken Access Control in WDS MCP Content Manager = 3.10.4 versions...

CVE-2026-105072

Unauthenticated Broken Access Control in FluentBooking Pro 2.5.0 versions...

CVE-2026-35029-PoC

CVE-2026-35029 — LiteLLM /config/update 권한 없는 접근 취약점 Broken Access Control LiteLLM 의 /config/update 엔드포인트는 호출자의 역할 권한을 확인하지 않습니다. 유효한 API Key를 가진 모든 인증된 사용자는관리자 권한 없이도 프록시 구성을 수정하고 악성 Pass-Through 엔드포인트를 등록하여 환경 변수 탈취, 임의 파일 읽기, 원격 코드 실행 등의 공격을 수행할 수 있습니다. Field| Value ---|--- CVE| CVE-2026-35029...

EUVD-2026-92959

Unauthenticated Broken Access Control in WP Event Solution = 4.1.25 versions...

CVE-2026-97300 WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in WP Event Solution = 4.1.25 versions...

CVE-2026-97300 WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in WP Event Solution = 4.1.25 versions...

CVE-2026-97300

The WP Event Solution WordPress plugin, in versions

CVE-2026-39789 WordPress Fluent Affiliate Pro plugin <= 1.6.4 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Fluent Affiliate Pro = 1.6.4 versions...