1092 matches found
WordPress MWB HubSpot for WooCommerce plugin <= 1.6.7 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by Jakub Herman in WordPress Plugin MWB HubSpot for WooCommerce versions = 1.6.7...
WordPress Popup by Supsystic plugin <= 1.13.0 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by Asim Alshaya in WordPress Plugin Popup by Supsystic versions = 1.13.0...
WordPress SupportCandy plugin <= 3.5.1 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by hackthesoul in WordPress Plugin SupportCandy versions = 3.5.1...
CVE-2026-73995: Authentication Bypass by Spoofing
Subscriber Broken Authentication in User Registration = 5.2.6 versions...
CVE-2026-73350: Incorrect Privilege Assignment
Unauthenticated Broken Authentication in SupportCandy = 3.5.1 versions...
CVE-2026-73396: Authentication Bypass Using an Alternate Path or Channel
Subscriber Broken Authentication in MWB HubSpot for WooCommerce = 1.6.7 versions...
PT-2026-77051
Unauthenticated Broken Authentication in Ezoic = 2.22.11 versions...
CVE-2026-21582: Improper Authentication
This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to perfor...
CVE-2026-73398: Authentication Bypass Using an Alternate Path or Channel
Unauthenticated Broken Authentication in Piraeus Bank WooCommerce Payment Gateway 3.2.0 versions...
PT-2026-77123
Subscriber Broken Authentication in User Registration = 5.2.6 versions...
PT-2026-77116
Name of the Vulnerable Software and Affected Versions MWB HubSpot for WooCommerce versions prior to 1.6.8 Description The software contains a broken authentication mechanism that allows users with Subscriber privileges to bypass authentication requirements. Recommendations Update MWB HubSpot for...
PT-2026-77110
Unauthenticated Broken Authentication in Popup by Supsystic = 1.13.0 versions...
PT-2026-77118
Name of the Vulnerable Software and Affected Versions Piraeus Bank WooCommerce Payment Gateway version 3.2.0 Description The software contains a broken authentication mechanism that allows unauthenticated access. Recommendations At the moment, there is no information about a newer version that...
PT-2026-77091
Unauthenticated Broken Authentication in SupportCandy = 3.5.1 versions...
CVE-2026-32481: Authentication Bypass Using an Alternate Path or Channel
Unauthenticated Broken Authentication in Ezoic = 2.22.11 versions...
CVE-2026-73381: Authentication Bypass Using an Alternate Path or Channel
Unauthenticated Broken Authentication in Popup by Supsystic = 1.13.0 versions...
CVE-2026-73399: Authentication Bypass Using an Alternate Path or Channel
Unauthenticated Broken Authentication in Flutterwave WooCommerce = 3.3.0 versions...
PT-2026-77119
Unauthenticated Broken Authentication in Flutterwave WooCommerce = 3.3.0 versions...
WordPress User Registration plugin <= 5.2.6 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by DmTomHe in WordPress Plugin User Registration versions = 5.2.6...