1092 matches found
EUVD-2026-63314
Unauthenticated Broken Authentication in User Registration & Membership Pro = 5.4.5 versions...
CVE-2026-74001 WordPress User Registration & Membership Pro plugin <= 5.4.5 - Account Takeover vulnerability
Unauthenticated Broken Authentication in User Registration & Membership Pro = 5.4.5 versions...
CVE-2026-66677 WordPress Leyka plugin <= 3.32.3 - Broken Authentication vulnerability
Subscriber Broken Authentication in Leyka = 3.32.3 versions...
EUVD-2026-63305
Subscriber Broken Authentication in Leyka = 3.32.3 versions...
CVE-2026-66677
CVE-2026-66677 is a Broken Authentication vulnerability in the WordPress plugin Leyka affecting versions
Vulnerabilities are hidden in Zabbix
Zabbix SIA has identified several vulnerabilities in Zabbix, including the API, frontend, script items, preprocessing components, and the Windows Agent installer. These vulnerabilities affect various aspects of Zabbix. - A problem with the login lockout mechanism causes multiple simultaneous fail...
PT-2026-78978
Name of the Vulnerable Software and Affected Versions Leyka versions prior to 3.32.4 Description Broken authentication exists for subscribers, allowing potential unauthorized access to accounts. Recommendations Update to a version newer than 3.32.3...
CVE-2026-66677: Authentication Bypass Using an Alternate Path or Channel
Subscriber Broken Authentication in Leyka = 3.32.3 versions...
CVE-2026-74001: Authentication Bypass Using an Alternate Path or Channel
Unauthenticated Broken Authentication in User Registration & Membership Pro = 5.4.5 versions...
PT-2026-78987
Unauthenticated Broken Authentication in User Registration & Membership Pro = 5.4.5 versions...
WordPress Leyka plugin <= 3.32.3 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by Jakub Herman in WordPress Plugin Leyka versions = 3.32.3...
EUVD-2026-62206
This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to perfor...
BASM (Broken Authentication & Session Management) Bouncy Castle Dependency in Crowd Data Center and Server
This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-12803 was introduced in 6.1.0 and later of Crowd Data Center and Server. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...
BASM (Broken Authentication & Session Management) Bouncy Castle Dependency in Crowd Data Center and Server
This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-12816 was introduced in 6.1.0 and later of Crowd Data Center and Server. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...
BASM (Broken Authentication & Session Management) Bouncy Castle Dependency in Crowd Data Center and Server
This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-59639 was introduced in 6.1.0 and later of Crowd Data Center and Server. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...
CVE-2026-21582
This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to perfor...
CVE-2026-73995
Subscriber Broken Authentication in User Registration = 5.2.6 versions...
CVE-2026-73398
Unauthenticated Broken Authentication in Piraeus Bank WooCommerce Payment Gateway 3.2.0 versions...