16511 matches found
CVE-2026-95527: Missing Authorization
Unauthenticated Broken Access Control in Conekta Payment Gateway = 6.2.4 versions...
CVE-2026-94079: Missing Authorization
Unauthenticated Broken Access Control in WP User Manager = 2.9.19 versions...
CVE-2026-84791: Authorization Bypass Through User-Controlled Key
ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability that allowed an authenticated low-privilege user to modify Change Management report schedule configurations for firewalls outside their assigned scope...
CVE-2026-84789: Authorization Bypass Through User-Controlled Key
ZohoCorp ManageEngine OpManager and Firewall Analyzer versions 12.8.710 and below were vulnerable to a Broken Access Control vulnerability that allowed an authenticated low-privilege user to create alert notifications for firewalls outside their assigned scope...
CVE-2026-90904: Improper Access Control
Joomla Extension - joomshaper.com - Broken Access Control ACL Bypass in ApiController Record Editing in Easy Store extension 1.0.0-3.0.0 - The allowEdit method in ApiController.php hardcoded return true;, bypassing Joomla component-level and asset-level ACL permission checks. Any authenticated...
CVE-2026-94080: Missing Authorization
Unauthenticated Broken Access Control in MarketKing = 2.1.70 versions...
CVE-2026-93620: Missing Authorization
Unauthenticated Broken Access Control in PayPlus Payment Gateway = 8.2.5 versions...
PT-2026-97454
Unauthenticated Broken Access Control in WP User Manager = 2.9.19 versions...
PT-2026-97480
Unauthenticated Broken Access Control in Conekta Payment Gateway = 6.2.4 versions...
PT-2026-97455
Unauthenticated Broken Access Control in MarketKing = 2.1.70 versions...
PT-2026-97446
Name of the Vulnerable Software and Affected Versions WSP MCP – AI Agents Connector versions prior to 2.7.1 Description Broken access control allows contributors to perform unauthorized actions within the system. Recommendations Update WSP MCP – AI Agents Connector to version 2.7.1 or later...
PT-2026-97492
Unauthenticated Broken Access Control in Loops & Logic = 4.2.4 versions...
PT-2026-97466
Name of the Vulnerable Software and Affected Versions AppMySite versions prior to 3.15.5 Description An unauthenticated broken access control issue exists, allowing unauthorized users to bypass access restrictions. Recommendations Update to a version newer than 3.15.4...
PT-2026-97448
Name of the Vulnerable Software and Affected Versions PayPlus Payment Gateway versions prior to 8.2.6 Description An unauthenticated broken access control issue exists, allowing unauthorized users to bypass security restrictions. Recommendations Update to a version newer than 8.2.5...
PT-2026-97174
Name of the Vulnerable Software and Affected Versions The Events Calendar WordPress plugin versions prior to 6.17.5 Description A broken access control issue exists where the software fails to verify the post status of linked records before including their stored details in a public REST API...
PT-2026-97469
Subscriber Broken Access Control in Fluent Support = 2.3.2 versions...
CVE-2026-93529: Missing Authorization
Contributor Broken Access Control in WSP MCP – AI Agents Connector = 2.7.0 versions...
CVE-2026-95513: Missing Authorization
Unauthenticated Broken Access Control in Online Booking & Scheduling Calendar for WordPress by vcita = 4.6.0 versions...
PT-2026-97473
Name of the Vulnerable Software and Affected Versions Online Booking & Scheduling Calendar for WordPress by vcita versions prior to 4.6.1 Description An unauthenticated broken access control issue exists, allowing unauthorized users to bypass security restrictions. Recommendations Update to a...