12666 matches found
CVE-2026-66455
Subscriber Broken Access Control in ReactPress = 3.4.0 versions...
CVE-2026-66454
Unauthenticated Broken Access Control in WP Social Avatar = 1.5 versions...
EUVD-2026-57874
Unauthenticated Broken Access Control in WP Social Avatar = 1.5 versions...
CVE-2026-66455
CVE-2026-66455 affects the WordPress ReactPress plugin up to version 3.4.0, described as a Subscriber Broken Access Control vulnerability. The NVD entry links a MEDIUM impact (CVSS 3.1: AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L) with network attack vector and low confidentiality, integrity, and availab...
CVE-2026-66454
CVE-2026-66454 affects the WordPress WP Social Avatar plugin (versions
EUVD-2026-57867
Unauthenticated Broken Access Control in MultiVendorX = 5.0.10 versions...
CVE-2026-66441
CVE-2026-66441 affects WordPress MultiVendorX plugin versions up to 5.0.10, with unauthenticated broken access control. The available sources identify the affected product and the vulnerability class but do not provide a confirmed patch version or remediation steps. CVSS v3.1 base score 7.5 (HIGH...
CVE-2026-66441
Unauthenticated Broken Access Control in MultiVendorX = 5.0.10 versions...
CVE-2026-66441 WordPress MultiVendorX plugin <= 5.0.10 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in MultiVendorX = 5.0.10 versions...
CVE-2026-66431
Unauthenticated Broken Access Control in Bitcoin Lightning Payment Gateway for WooCommerce via CLINK = 1.0.7 versions...
EUVD-2026-57864
Unauthenticated Broken Access Control in Bitcoin Lightning Payment Gateway for WooCommerce via CLINK = 1.0.7 versions...
CVE-2026-66431
CVE-2026-66431 concerns the WordPress plugin WordPress Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) with versions up to 1.0.7. The issue is Unauthenticated Broken Access Control, meaning an attacker can access restricted functionality without authentication. The description and c...
CVE-2026-66431 WordPress Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) plugin <= 1.0.7 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Bitcoin Lightning Payment Gateway for WooCommerce via CLINK = 1.0.7 versions...
CVE-2026-61984 WordPress WPMobile.App plugin <= 11.77 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WPMobile.App = 11.77 versions...
CVE-2026-61984
CVE-2026-61984 affects the WordPress WordPress WP Mobile App plugin (WPMobile.App) for versions
EUVD-2026-57978
Unauthenticated Broken Access Control in WPMobile.App = 11.77 versions...
CVE-2026-61984
Unauthenticated Broken Access Control in WPMobile.App = 11.77 versions...
EUVD-2026-57975
Unauthenticated Broken Access Control in Secure Card Gateway for ePay Paycenter Piraeus Bank = 1.0.32 versions...
CVE-2026-61978
The CVE concerns a WordPress plugin: Secure Card Gateway for ePay Paycenter (Piraeus Bank), affected versions up to 1.0.32. The issue is Unauthenticated Broken Access Control, implying that unauthenticated attackers could access or manipulate restricted functionality within the plugin. No root ca...