BASM (Broken Authentication & Session Management) at Bouncy Castle Dependency in Crucible Server

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-59642 was introduced in 4.9.0 and later of Crucible. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

BASM (Broken Authentication & Session Management) at Bouncy Castle Dependency in Crucible Server

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-12803 was introduced in 4.9.0 and later of Crucible. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

BASM (Broken Authentication & Session Management) at Bouncy Castle Dependency in Crucible Server

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-12816 was introduced in 4.9.0 and later of Crucible. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

BASM (Broken Authentication & Session Management) at Bouncy Castle Dependency in Crucible Data Center and Server

This is a vulnerability in a non-Atlassian Crucible dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity BASM Broken Authentication & Session Management vulnerability was introduced in version 4.9.0 of Crucible Data Center and...

PT-2026-84026

Unauthenticated Broken Authentication in RegistrationMagic = 6.0.9.8 versions...

CVE-2026-82225: Authentication Bypass Using an Alternate Path or Channel

Unauthenticated Broken Authentication in RegistrationMagic = 6.0.9.8 versions...

WordPress RegistrationMagic plugin <= 6.0.9.8 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Emiliano Carrizo in WordPress Plugin RegistrationMagic versions = 6.0.9.8...

EUVD-2026-65168

Unauthenticated Broken Authentication in WPLegalPages = 3.7.0 versions...

PT-2026-81390

Name of the Vulnerable Software and Affected Versions djust versions prior to 1.0.4 Description An authentication bypass exists in the LiveViewConsumer when a view is restricted by login required, permission required, or a redirecting on mount hook. In these cases, the handle mount function sends...

CVE-2026-78259

Unauthenticated Broken Authentication in WPLegalPages = 3.7.0 versions...

CVE-2026-78259 WordPress WPLegalPages plugin <= 3.7.0 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in WPLegalPages = 3.7.0 versions...

CVE-2026-78259

CVE-2026-78259 is an unauthenticated Broken Authentication vulnerability in the WPLegalPages WordPress plugin, affecting versions ≤ 3.7.0 . A remote, unauthenticated attacker can exploit this over the network with low complexity and no user interaction, resulting in low-impact compromises to conf...

CVE-2026-78259 WordPress WPLegalPages plugin <= 3.7.0 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in WPLegalPages = 3.7.0 versions...

WordPress WPLegalPages plugin <= 3.7.0 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by HieuPenguinnn in WordPress Plugin WPLegalPages versions = 3.7.0...

CVE-2026-78259: Authentication Bypass Using an Alternate Path or Channel

Unauthenticated Broken Authentication in WPLegalPages = 3.7.0 versions...

PT-2026-81054

Unauthenticated Broken Authentication in WPLegalPages = 3.7.0 versions...

CVE-2026-74001

Unauthenticated Broken Authentication in User Registration & Membership Pro = 5.4.5 versions...

CVE-2026-66677

Subscriber Broken Authentication in Leyka = 3.32.3 versions...

CVE-2026-74001

User Registration & Membership Pro is a WordPress plugin affected by an unauthenticated broken authentication vulnerability in versions ≤ 5.4.5 , enabling account takeover without any prior credentials. The flaw was discovered by 0xd4rk5id3 and carries a CVSS 3.1 score of 9.8 (CRITICAL) with a ne...

CVE-2026-74001 WordPress User Registration & Membership Pro plugin <= 5.4.5 - Account Takeover vulnerability

Unauthenticated Broken Authentication in User Registration & Membership Pro = 5.4.5 versions...