16415 matches found
PT-2026-103895
Subscriber Broken Access Control in Gratisfaction = 4.6.3 versions...
PT-2026-103882
Name of the Vulnerable Software and Affected Versions WP Full Stripe Free versions prior to 8.5.7 Description An unauthenticated broken access control issue exists, allowing unauthorized users to bypass security restrictions. Recommendations Update to a version newer than 8.5.6...
CVE-2026-97258: Missing Authorization
Subscriber Broken Access Control in Aruba Migration Tool = 1.0.4 versions...
PT-2026-103892
Subscriber Broken Access Control in Social Boost = 3.6.2 versions...
CVE-2026-97297: Missing Authorization
Subscriber Broken Access Control in Gratisfaction = 4.6.3 versions...
PT-2026-103893
Subscriber Broken Access Control in WP Project Manager = 4.0.7 versions...
PT-2026-105482
Summary /api/storage/getOutlineStorage is registered with CheckAuth only and performs no authorization of any kind. Given a document identifier it returns that document's stored outline state, regardless of the document's publish tier. The two write endpoints for the same data, setOutlineStorage...
PT-2026-103864
iControl is affected by a Broken Access Control vulnerability, which could allow an attacker to exploit missing authentication checks or insecure direct object references IDOR, enabling privilege escalation and the unauthorized modification or deletion of sensitive application data...
CVE-2026-66246: Execution with Unnecessary Privileges
iControl is affected by a Broken Access Control vulnerability, which could allow an attacker to exploit missing authentication checks or insecure direct object references IDOR, enabling privilege escalation and the unauthorized modification or deletion of sensitive application data...
PT-2026-103887
Name of the Vulnerable Software and Affected Versions Aruba Migration Tool versions prior to 1.0.5 Description Broken access control allows subscribers to bypass intended security restrictions. Recommendations Update Aruba Migration Tool to version 1.0.5 or later...
CVE-2026-97281: Missing Authorization
Subscriber Broken Access Control in WP Project Manager = 4.0.7 versions...
CVE-2026-97277: Missing Authorization
Subscriber Broken Access Control in Social Boost = 3.6.2 versions...
CVE-2026-102397
Unauthenticated Broken Access Control in Ultimate Maps by Supsystic = 1.5.5 versions...
CVE-2026-102375
Missing Authorization vulnerability in Optimole Optimole optimole-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optimole: from n/a through 4.2.14...
CVE-2026-102375
The Optimole plugin for WordPress (versions
CVE-2026-102375 WordPress Optimole plugin <= 4.2.14 - Broken Access Control vulnerability
Missing Authorization vulnerability in Optimole Optimole optimole-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optimole: from n/a through 4.2.14...
CVE-2026-102375 WordPress Optimole plugin <= 4.2.14 - Broken Access Control vulnerability
Missing Authorization vulnerability in Optimole Optimole optimole-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optimole: from n/a through 4.2.14...
EUVD-2026-90221
Subscriber Broken Access Control in Optimole = 4.2.14 versions...