CVE-2026-39763 WordPress WP Dummy Content Generator plugin <= 4.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Deepak Anand WP Dummy Content Generator wp-dummy-content-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Dummy Content Generator: from n/a through 4.0.0...

WordPress WP Dummy Content Generator plugin <= 4.0.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by longnv719 in WordPress Plugin WP Dummy Content Generator versions = 4.0.0...

WordPress WPO365 plugin <= 44.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Michał Wiencek in WordPress Plugin WPO365 versions = 44.1...

WordPress Delete All Comments of wordpress plugin <= 7.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by mamgad in WordPress Plugin Delete All Comments of wordpress versions = 7.1...

brokeCLAUDIA

🔓 brokeCLAUDIA - CVE-2025-41090 CVE-2025-41090 - microCLAUDIAにおける不正なアクセス制御の脆弱性 📑 目次 microCLAUDIAとは？ 脆弱性（CVE-2025-41090） 📂 公開情報 CWE 不正なアクセス制御 修正措置 プレゼンテーション エクスプロイト 📂 概要 必要条件 インストール 使い方 メモ 参考文献 🧠 microCLAUDIAとは？ microCLAUDIA は、CLAUDIA エンジンをベースにした機能であり、組織の機器を悪質なランサムウェアコードから保護します。これは、Windows...

CVE-2026-39721

The Starter Templates WordPress plugin (astra-sites) versions 4.7.7 and below is vulnerable to a Missing Authorization vulnerability (CWE-862). This flaw allows for the exploitation of incorrectly configured access control security levels . No specific exploit information or remediation steps are...

CVE-2026-39721 WordPress Starter Templates plugin <= 4.7.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Brainstorm Force Starter Templates astra-sites allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Starter Templates: from n/a through 4.7.7...

CVE-2026-39721 WordPress Starter Templates plugin <= 4.7.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Brainstorm Force Starter Templates astra-sites allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Starter Templates: from n/a through 4.7.7...

WordPress Starter Templates plugin <= 4.7.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Elaprendiz1927 in WordPress Plugin Starter Templates versions = 4.7.7...

CVE-2026-105064 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.22 - Broken Access Control vulnerability

Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Parameter Injection.This issue affects Unlimited Elements For Elementor Fre...

CVE-2026-105064 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.22 - Broken Access Control vulnerability

Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates unlimited-elements-for-elementor allows Parameter Injection.This issue affects Unlimited Elements For Elementor Fre...

CVE-2026-105064

The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) WordPress plugin is vulnerable to Parameter Injection due to a Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability (CWE-470). This flaw impacts versions up to and including 2.0.22 ....

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.22 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ayukiab in WordPress Plugin Unlimited Elements For Elementor Free Widgets, Addons, Templates versions = 2.0.22...

CVE-2026-104675 WordPress Event Tickets plugin <= 5.30.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0...

CVE-2026-104675 WordPress Event Tickets plugin <= 5.30.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0...

CVE-2026-104675

The Liquid Web / StellarWP Event Tickets plugin (versions up to and including 5.30.0 ) is susceptible to a Missing Authorization vulnerability (CWE-862). This flaw allows for Exploiting Incorrectly Configured Access Control Security Levels . The impact of this vulnerability is characterized by a ...

WordPress Event Tickets plugin <= 5.30.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Intrudify in WordPress Plugin Event Tickets versions = 5.30.0...

CVE-2026-105055

The WP Mailster plugin for WordPress, versions up to 1.9.0.0 , is vulnerable to a Broken Access Control issue. This vulnerability stems from missing authorization within the wp-mailster component, which allows for the exploitation of incorrectly configured access control security levels. The vuln...

CVE-2026-105055 WordPress WP Mailster plugin <= 1.9.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Mailster WP Mailster wp-mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: from n/a through 1.9.0.0...

CVE-2026-105055 WordPress WP Mailster plugin <= 1.9.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Mailster WP Mailster wp-mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: from n/a through 1.9.0.0...