CVE-2026-105421

The WordPress Kit (formerly ConvertKit) for WooCommerce plugin (versions

WordPress Kit (formerly ConvertKit) for WooCommerce plugin <= 2.2.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin Kit formerly ConvertKit for WooCommerce versions = 2.2.0...

WordPress Morning for WooCommerce plugin <= 2.4.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by ParkHyunWoo in WordPress Plugin Morning for WooCommerce versions = 2.4.1...

stump-smartlist-bola

Stump: Smart List Takeover via Broken Access Control BOLA...

WordPress Wise Chat plugin <= 3.4.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by takito in WordPress Plugin Wise Chat versions = 3.4.3...

WordPress App for Cloudflare® plugin <= 1.10.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by takito in WordPress Plugin App for Cloudflare® versions = 1.10.1...

WordPress PayPlug for WooCommerce (Official) plugin <= 3.1.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Jakub Herman in WordPress Plugin PayPlug for WooCommerce Official versions = 3.1.0...

CVE-2026-103684 WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability

Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25...

CVE-2026-103684 WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability

Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25...

CVE-2026-103684

The WP Event Solution plugin (versions n/a through 4.1.25 ) is vulnerable to a Missing Authorization (CWE-862) issue. This Broken Access Control vulnerability allows for the exploitation of incorrectly configured access control security levels. The impact involves potential low integrity changes,...

WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin WP Event Solution versions = 4.1.25...

CVE-2026-94669

The Fluent Forms Pro Add On Pack plugin by WP ManageNinja LLC, versions up to and including 6.2.13 , is vulnerable to a Broken Access Control issue (CWE-862). The root cause is missing authorization which allows for the exploitation of incorrectly configured access control security levels . This ...

CVE-2026-94669 WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.13 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP ManageNinja LLC Fluent Forms Pro Add On Pack fluentformpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Forms Pro Add On Pack: from n/a through 6.2.13...

CVE-2026-94669 WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.13 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP ManageNinja LLC Fluent Forms Pro Add On Pack fluentformpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Forms Pro Add On Pack: from n/a through 6.2.13...

WordPress picu plugin <= 3.10.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Intrudify in WordPress Plugin picu versions = 3.10.1...

WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.13 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Tarcísio LuchesiPoystick in WordPress Plugin Fluent Forms Pro Add On Pack versions = 6.2.13...

WordPress PowerPress Podcasting plugin <= 11.17.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by b1ue0cean in WordPress Plugin PowerPress Podcasting versions = 11.17.9...

CVE-2023-22515-Scan.

CVE-2023-22515-Scan 概要 これは、CVE-2023-22515のためのシンプルなスキャナーです。CVE-2023-22515は、Atlassian Confluence Data CenterおよびServerの深刻な脆弱性であり、脅威アクターによって実際に悪用され、不正なConfluence管理者アカウントを作成し、Confluenceインスタンスにアクセスするために使用されています。この脆弱性は当初「権限昇格」の問題として説明されていましたが、Atlassianは後にセキュリティアドバイザリで分類を「アクセス制御の破綻」に変更しました。...

CVE-2026-39763 WordPress WP Dummy Content Generator plugin <= 4.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Deepak Anand WP Dummy Content Generator wp-dummy-content-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Dummy Content Generator: from n/a through 4.0.0...

CVE-2026-39763

The WP Dummy Content Generator plugin for WordPress (versions n/a through 4.0.0 ) is vulnerable to a Broken Access Control issue. Specifically, it suffers from Missing Authorization (CWE-862), allowing attackers to exploit Incorrectly Configured Access Control Security Levels . While the base sev...