PT-2026-77116

Name of the Vulnerable Software and Affected Versions MWB HubSpot for WooCommerce versions prior to 1.6.8 Description The software contains a broken authentication mechanism that allows users with Subscriber privileges to bypass authentication requirements. Recommendations Update MWB HubSpot for...

PT-2026-77051

Unauthenticated Broken Authentication in Ezoic = 2.22.11 versions...

CVE-2026-73398: Authentication Bypass Using an Alternate Path or Channel

Unauthenticated Broken Authentication in Piraeus Bank WooCommerce Payment Gateway 3.2.0 versions...

PT-2026-77110

Unauthenticated Broken Authentication in Popup by Supsystic = 1.13.0 versions...

PT-2026-77118

Name of the Vulnerable Software and Affected Versions Piraeus Bank WooCommerce Payment Gateway version 3.2.0 Description The software contains a broken authentication mechanism that allows unauthenticated access. Recommendations At the moment, there is no information about a newer version that...

PT-2026-77091

Unauthenticated Broken Authentication in SupportCandy = 3.5.1 versions...

PT-2026-77119

Unauthenticated Broken Authentication in Flutterwave WooCommerce = 3.3.0 versions...

CVE-2026-32481: Authentication Bypass Using an Alternate Path or Channel

Unauthenticated Broken Authentication in Ezoic = 2.22.11 versions...

CVE-2026-73381: Authentication Bypass Using an Alternate Path or Channel

Unauthenticated Broken Authentication in Popup by Supsystic = 1.13.0 versions...

CVE-2026-73399: Authentication Bypass Using an Alternate Path or Channel

Unauthenticated Broken Authentication in Flutterwave WooCommerce = 3.3.0 versions...

WordPress User Registration plugin <= 5.2.6 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by DmTomHe in WordPress Plugin User Registration versions = 5.2.6...

WordPress Ezoic plugin <= 2.22.11 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by HaiND in WordPress Plugin Ezoic versions = 2.22.11...

CVE-2026-66465

Unauthenticated Broken Authentication in Cartify = 1.3.0.1 versions...

CVE-2026-66453

Unauthenticated Broken Authentication in Salon booking system = 10.30.26 versions...

CVE-2026-28185

Unauthenticated Broken Authentication in Log in with Google = 1.4.2 versions...

CVE-2026-28008

Unauthenticated Broken Authentication in OAuth Single Sign On – SSO OAuth Client = 7.0.0 versions...

CVE-2026-66465

Unauthenticated Broken Authentication in Cartify = 1.3.0.1 versions...

EUVD-2026-57884

Unauthenticated Broken Authentication in Cartify = 1.3.0.1 versions...

CVE-2026-66465 WordPress Cartify theme <= 1.3.0.1 - Account Takeover vulnerability

Unauthenticated Broken Authentication in Cartify = 1.3.0.1 versions...

CVE-2026-66465

CVE-2026-66465 affects WordPress Cartify theme (Cartify Multipurpose) versions up to and including 1.3.0.1, with unauthenticated broken authentication that can lead to account takeover. The connected documents confirm the vulnerability type and the affected version range but do not provide remedi...