WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin User Registration versions = 5.2.7...

WordPress Progress Planner plugin <= 1.10.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Asim Alshaya in WordPress Plugin Progress Planner versions = 1.10.0...

WordPress Deposits and Partial Payments for WooCommerce plugin <= 4.0.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by sungbyeongchan in WordPress Plugin Deposits and Partial Payments for WooCommerce versions = 4.0.1...

WordPress BEAR plugin <= 1.2.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Sakri Koskimies in WordPress Plugin BEAR versions = 1.2.2...

CVE-2021-40375

CVE-2021-40375 - OpenEyes 3.5.1 におけるアクセス制御の欠陥 説明 Apperta Foundation によって開発された OpenEyes 3.5.1 に、不適切なアクセス制御の脆弱性が確認されました。...

CVE-2023-49980

CVE-2023-49980 Best Student Result Management System 1.0 - 디렉터리 목록 설명 : Best Student Result Management System 1.0은 손상된 접근 제어Broken Access Control에 취약합니다. 디렉터리 목록Directory Listing 취약점으로 인해 원격 공격자는 인증 없이 애플리케이션의 includes 및 assets 디렉터리 내부의 민감한 파일을 볼 수 있습니다. 취약한 제품 버전 : Best Student Result Management...

CVE-2026-45332-PoC

CVE-2026-45332: Automad CMS のアクセス制御の不備 CVE-2026-45332 の概念実証です。Automad CMS のアクセス制御の不備（Broken Access Control）に関する脆弱性で、初期設定後に無効化されることのないセットアップエンドポイントを通じて、認証されていない任意の攻撃者がすべての管理者アカウントの bcrypt パスワードハッシュと TOTP シークレットをダンプできます。 フィールド| 値 ---|--- CVE| CVE-2026-45332 GHSA| GHSA-xm76-r88j-vm3g 製品| Automad CMS...

WordPress WC Ukraine Shipping plugin <= 1.23.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Heinrihs Skrodelis in WordPress Plugin WC Ukraine Shipping versions = 1.23.2...

WordPress Scratch & Win – Giveaways and Contests plugin <= 3.0.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by SecondGateWP in WordPress Plugin Scratch & Win – Giveaways and Contests versions = 3.0.2...

WordPress Timetics plugin <= 1.0.63 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by dcs in WordPress Plugin Timetics versions = 1.0.63...

WordPress UsersWP plugin <= 1.2.74 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Md. Moniruzzaman Prodhan in WordPress Plugin UsersWP versions = 1.2.74...

WordPress Lookzy plugin <= 1.1.14 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by cazy in WordPress Plugin Lookzy versions = 1.1.14...

CVE-2024-48955_Overview

CVE-2024-48955개요 설명: Netadmin 4 IAM 접근 제어 결함이 있습니다. 영향받는 버전: V4.030319 NetAdmin 시스템은 기능 메뉴를 구성하는 엔드포인트에서 데이터와 기능을 반환합니다. 이 호출의 반환값은 암호화되지 않으며, 시스템이 세션 권한을 검증하지 않기 때문에 공격자는 더 높은 권한을 가진 사용자의 브라우저 콘텐츠를 복사하여 코드가 복사된 사용자의 기능에 접근할 수 있습니다. 취약점 유형 Broken Access Control CVSS 점수 및 공격 벡터 기본 점수: 7.6 벡터:...

CVE-2024-50967

CVE-2024-50967 DATAGERRY 취약한 접근 제어 이 취약점은 DATAGERRY 플랫폼의 2.2.0까지 포함한 모든 버전≤2.2.0에 영향을 미칩니다...

golang-webmin-CVE-2022-0824-revshell

golang-webmin-CVE-2022-0824-revshell Webmin ターゲット URL c - Webmin の認証情報 sl - ペイロードをホストするローカルサーバーの IP とポート s - コールバック IP p - コールバックポート 参照 https://www.webmin.com/security.html https://huntr.dev/bounties/d0049a96-de90-4b1a-9111-94de1044f295/ https://nvd.nist.gov/vuln/detail/CVE-2022-0824...

CVE-2026-39717 WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.10...

CVE-2026-39717 WordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.10...

WordPress LearnPress plugin <= 4.4.9.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin LearnPress versions = 4.4.9.1...

WordPress WDS MCP Content Manager plugin <= 3.10.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WDS MCP Content Manager versions = 3.10.4...

CVE-2026-39439 WordPress WebSamurai plugin <= 1.0.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Kiera Howe WebSamurai websamurai allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebSamurai: from n/a through 1.0.7...