16415 matches found
PT-2026-103235
Subscriber Broken Access Control in MCP Content Manager Lite = 1.1.0 versions...
PT-2026-103486
šØ CVE-2026-102375 Missing Authorization vulnerability in Optimole Optimole optimole-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optimole: from n/a through 4.2.14. š@cveNotify...
CVE-2026-97267: Missing Authorization
Subscriber Broken Access Control in Prevent files / folders access = 2.6.7 versions...
CVE-2026-97285: Missing Authorization
Contributor Broken Access Control in The Events Calendar = 6.17.5 versions...
CVE-2026-96817: Missing Authorization
Subscriber Broken Access Control in MakeCommerce for WooCommerce = 4.1.0 versions...
CVE-2026-94074: Missing Authorization
Unauthenticated Broken Access Control in Simply Schedule Appointments = 1.6.12.29 versions...
CVE-2026-102582: Direct Request
A flaw was found in Moodle. The manual enrolment management page did not properly check whether the manual enrolment plugin was disabled, allowing users with enrolment permissions to access the page directly by navigating to its URL. Consequently, an authorized user could manage manual enrolments...
PT-2026-103162
Unauthenticated Broken Access Control in Simply Schedule Appointments = 1.6.12.29 versions...
PT-2026-103202
Subscriber Broken Access Control in MakeCommerce for WooCommerce = 4.1.0 versions...
PT-2026-103251
Subscriber Broken Access Control in Prevent files / folders access = 2.6.7 versions...
PT-2026-103203
Unauthenticated Broken Access Control in WP Express Checkout Accept PayPal Payments = 2.4.9 versions...
CVE-2026-94120: Missing Authorization
Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms = 2.7.2 versions...
PT-2026-103243
Unauthenticated Broken Access Control in Blocksy Companion = 2.1.55 versions...
PT-2026-103239
Subscriber Broken Access Control in AllAble Connector = 0.13.4 versions...
CVE-2026-97239: Missing Authorization
Subscriber Broken Access Control in MCP Content Manager Lite = 1.1.0 versions...
CVE-2026-97243: Missing Authorization
Subscriber Broken Access Control in AllAble Connector = 0.13.4 versions...
ABSENTIA: Detecting Broken Access Control Vulnerabilities in Web Applications
Broken access control, the failure of authorization, is one of the most prevalent web security risks. Unlike injection, a flow of untrusted input into a dangerous operation, authorization is a relation: who may act on what, not how data moves. Each application decides that relation for itself, so...
PT-2026-103491
Unauthenticated Broken Access Control in Ultimate Maps by Supsystic = 1.5.5 versions...