13233 matches found
CVE-2026-27328 WordPress EduBlink theme <= 2.0.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in DevsBlink EduBlink edublink allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EduBlink: from n/a through = 2.0.7...
CVE-2026-27327
The CVE-2026-27327 entry concerns the WordPress YayMail – WooCommerce Email Customizer plugin (YayMail) version <= 4.3.2, where a Missing Authorization/ Broken Access Control vulnerability exists due to incorrectly configured access control security levels. Affected component is the YayMail pl...
WordPress Ally plugin <= 4.0.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Nguyen Ba Khanh in WordPress Plugin Ally versions = 4.0.2...
CVE-2026-27066
CVE-2026-27066 corresponds to a Missing/Incorrectly Configured Authorization in the WordPress plugin Live Sales Notification for WooCommerce. Red Hat and Patch sources describe an access-control vulnerability in Live Sales Notification for WooCommerce (the plugin) with vulnerable versions documen...
CVE-2026-27092
CVE-2026-27092 describes a Missing Authorization (broken access control) vulnerability in the WordPress WPAdverts plugin, affecting WPAdverts versions up to and including 2.3.0 (some sources list up to 2.2.11). The issue is tied to misconfigured access control on WPAdverts, enabling unauthorized ...
CVE-2026-27066
...
CVE-2026-27092 WordPress WPAdverts plugin <= 2.3.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Greg Winiarski WPAdverts wpadverts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPAdverts: from n/a through = 2.3.0...
CVE-2026-25473
CVE-2026-25473 affects the WordPress WZone plugin versions up to and including 14.0.31, describing a Missing Authorization / Broken Access Control vulnerability in AA-Team WZone woozone due to incorrectly configured access control. Reported impact indicates potential issues with access control (I...
CVE-2026-27042 WordPress NotificationX plugin <= 3.2.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in WPDeveloper NotificationX notificationx allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects NotificationX: from n/a through = 3.2.1...
CVE-2026-27042
CVE-2026-27042 affects the WordPress NotificationX plugin (versions <= 3.2.1). The issue is described as a Missing Authorization vulnerability due to incorrectly configured access control in NotificationX, enabling a broken/unauthorized access scenario. Public sources in the connected document...
CVE-2026-27055 WordPress Penci AI SmartContent Creator plugin <= 2.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in PenciDesign Penci AI SmartContent Creator penci-ai allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Penci AI SmartContent Creator: from n/a through = 2.0...
CVE-2026-25473 WordPress WZone plugin <= 14.0.31 - Broken Access Control vulnerability
Missing Authorization vulnerability in AA-Team WZone woozone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WZone: from n/a through = 14.0.31...
CVE-2026-25473 WordPress WZone plugin <= 14.0.31 - Broken Access Control vulnerability
Missing Authorization vulnerability in AA-Team WZone woozone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WZone: from n/a through = 14.0.31...
CVE-2026-25441
CVE-2026-25441 affects the WordPress LeadConnector plugin up to version 3.0.21, described as a Missing Authorization / Broken Access Control vulnerability due to incorrectly configured access control security levels in LeadConnector. Impact noted as unauthorized access potential; no exploitation ...
CVE-2026-25459 WordPress Sober theme <= 3.5.12 - Broken Access Control vulnerability
Missing Authorization vulnerability in uixthemes Sober sober allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sober: from n/a through = 3.5.12...
CVE-2026-25441 WordPress LeadConnector plugin <= 3.0.21 - Broken Access Control vulnerability
Missing Authorization vulnerability in varunvairavanlc LeadConnector leadconnector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LeadConnector: from n/a through = 3.0.21...
CVE-2026-25459
CVE-2026-25459 affects the WordPress Sober theme (uixthemes Sober) prior to version 3.5.12, described as a Missing Authorization vulnerability due to incorrectly configured access control. Affected component is the Sober WordPress theme; root cause is broken/incorrect access controls enabling ins...
CVE-2026-25441 WordPress LeadConnector plugin <= 3.0.21 - Broken Access Control vulnerability
Missing Authorization vulnerability in varunvairavanlc LeadConnector leadconnector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LeadConnector: from n/a through = 3.0.21...
CVE-2026-25459 WordPress Sober theme <= 3.5.12 - Broken Access Control vulnerability
Missing Authorization vulnerability in uixthemes Sober sober allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sober: from n/a through = 3.5.12...