CVE-2026-39789 WordPress Fluent Affiliate Pro plugin <= 1.6.4 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Fluent Affiliate Pro = 1.6.4 versions...

CVE-2026-39789

The Fluent Affiliate Pro WordPress plugin, version 1.6.4 and below , is vulnerable to an unauthenticated Broken Access Control vulnerability. This flaw is classified as CWE-862: Missing Authorization , allowing an attacker to perform actions without proper authentication. The vulnerability has a ...

EUVD-2026-92954

Unauthenticated Broken Access Control in Morning for WooCommerce = 2.4.1 versions...

CVE-2026-39723

The Morning for WooCommerce plugin (versions

CVE-2026-39723 WordPress Morning for WooCommerce plugin <= 2.4.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Green Invoice Morning for WooCommerce wc-gateway-greeninvoice allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Morning for WooCommerce: from n/a through 2.4.1...

CVE-2026-39723 WordPress Morning for WooCommerce plugin <= 2.4.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Green Invoice Morning for WooCommerce wc-gateway-greeninvoice allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Morning for WooCommerce: from n/a through 2.4.1...

CVE-2026-39599 WordPress WDS MCP Content Manager plugin <= 3.10.4 - Broken Access Control vulnerability

Contributor Broken Access Control in WDS MCP Content Manager = 3.10.4 versions...

CVE-2026-39599 WordPress WDS MCP Content Manager plugin <= 3.10.4 - Broken Access Control vulnerability

Contributor Broken Access Control in WDS MCP Content Manager = 3.10.4 versions...

CVE-2026-39599

The WDS MCP Content Manager WordPress plugin affects versions

EUVD-2026-92953

Contributor Broken Access Control in WDS MCP Content Manager = 3.10.4 versions...

EUVD-2026-92952

Contributor Broken Access Control in IATO MCP = 1.11.0 versions...

CVE-2026-32582 WordPress IATO MCP plugin <= 1.12.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in iatoai IATO MCP iato-mcp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IATO MCP: from n/a through 1.12.0...

CVE-2026-32582

The WordPress IATO MCP plugin in versions

CVE-2026-32582 WordPress IATO MCP plugin <= 1.12.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in iatoai IATO MCP iato-mcp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IATO MCP: from n/a through 1.12.0...

CVE-2026-105072 WordPress FluentBooking Pro plugin < 2.5.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in FluentBooking Pro 2.5.0 versions...

CVE-2026-105072

The FluentBooking Pro WordPress plugin, in versions less than 2.5.0 , is vulnerable to an Unauthenticated Broken Access Control flaw. This vulnerability, classified under CWE-862 (Missing Authorization) , allows an attacker to perform actions without proper authentication. The impact is character...

EUVD-2026-92950

Unauthenticated Broken Access Control in FluentBooking Pro 2.5.0 versions...

CVE-2026-105072 WordPress FluentBooking Pro plugin < 2.5.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in FluentBooking Pro 2.5.0 versions...

CVE-2022-1329

WP Elementor 3.6.0/1/2 Ejecución Remota de Código Google Dork: none Date: April 16 2022 Exploit Author: AkuCyberSec https://github.com/AkuCyberSec Vendor Homepage: https://elementor.com/ Software Link: https://wordpress.org/plugins/elementor/advanced/ scroll down to select the version Version:...

wordpress-jetpack-broken-access-control-exploit

wordpress-jetpack-broken-access-control-exploit This is a Python3 program that exploits Jetpack 13.9.1 broken access control vulnerability CVE-2024-9926. DISCLAIMER This tool is intended for security engineers and appsec people for security assessments. Please use this tool responsibly. I do not...