16390 matches found
CVE-2026-39439 WordPress WebSamurai plugin <= 1.0.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in Kiera Howe WebSamurai websamurai allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebSamurai: from n/a through 1.0.7...
WordPress WebSamurai plugin <= 1.0.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WebSamurai versions = 1.0.7...
CVE-2026-32585 WordPress Airano MCP Bridge plugin <= 2.11.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in airano Airano MCP Bridge airano-mcp-bridge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Airano MCP Bridge: from n/a through 2.11.0...
CVE-2026-32585 WordPress Airano MCP Bridge plugin <= 2.11.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in airano Airano MCP Bridge airano-mcp-bridge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Airano MCP Bridge: from n/a through 2.11.0...
WordPress Airano MCP Bridge plugin <= 2.11.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Airano MCP Bridge versions = 2.11.0...
WordPress IATO MCP plugin <= 1.11.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin IATO MCP versions = 1.11.0...
WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Amelia versions = 2.4.10...
WordPress ProfilePress plugin <= 4.17.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin ProfilePress versions = 4.17.3...
WordPress ProfilePress plugin <= 4.17.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin ProfilePress versions = 4.17.3...
WordPress Forminator plugin <= 1.57.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Forminator versions = 1.57.2...
CVE-2026-51899
In SuperAGI v0.0.14 and prior, controller endpoints /api/agents/create, /api/agents/schedule, /api/agents/delete, /api/agents/editschedule, /api/agents/stopschedule allow authenticated users from one organization to create, schedule, edit, stop, and delete agents belonging to a different...
CVE-2026-97277
Subscriber Broken Access Control in Social Boost = 3.6.2 versions...
CVE-2026-97297
Subscriber Broken Access Control in Gratisfaction = 4.6.3 versions...
CVE-2026-97281
Subscriber Broken Access Control in WP Project Manager = 4.0.7 versions...
CVE-2026-97258
Subscriber Broken Access Control in Aruba Migration Tool = 1.0.4 versions...
CVE-2026-62073
Unauthenticated Broken Access Control in WP Full Stripe Free = 8.5.6 versions...
CVE-2026-97280
The Review Schema WordPress plugin (version 3.1.0 ) is vulnerable to a Missing Authorization flaw (CWE-862). This Broken Access Control vulnerability allows an attacker to exploit incorrectly configured access control security levels . The vulnerability impacts the integrity and availability of t...
CVE-2026-97280 WordPress Review Schema plugin 3.1.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Mamunur Rashid Review Schema review-schema allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Review Schema: 3.1.0...
CVE-2026-97280 WordPress Review Schema plugin 3.1.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Mamunur Rashid Review Schema review-schema allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Review Schema: 3.1.0...