CVE-2026-59524

The CVE concerns WordPress Easy Digital Downloads plugin ≤ 3.6.7 with Unauthenticated Broken Authentication . Affected component: the EDD plugin for WordPress; versions up to 3.6.7 are implicated. Root cause details are not specified in the provided documents. Impact is described as unauthenticat...

EUVD-2026-48190

Unauthenticated Broken Authentication in Easy Digital Downloads = 3.6.7 versions...

PT-2026-63856

Unauthenticated Broken Authentication in miniOrange Discord Integration = 2.2.4 versions...

PT-2026-63858

Unauthenticated Broken Authentication in Ziina = 1.2.21 versions...

CVE-2026-59554: Weak Authentication

Unauthenticated Broken Authentication in Ziina = 1.2.21 versions...

CVE-2026-59545: Authentication Bypass Using an Alternate Path or Channel

Unauthenticated Broken Authentication in miniOrange Discord Integration = 2.2.4 versions...

CVE-2026-59524: Authentication Bypass Using an Alternate Path or Channel

Unauthenticated Broken Authentication in Easy Digital Downloads = 3.6.7 versions...

PT-2026-63848

Unauthenticated Broken Authentication in Easy Digital Downloads = 3.6.7 versions...

WordPress miniOrange Discord Integration plugin <= 2.2.4 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by buitu in WordPress Plugin miniOrange Discord Integration versions = 2.2.4...

WordPress Ziina plugin <= 1.2.21 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Mitchell in WordPress Plugin Ziina versions = 1.2.21...

WordPress Easy Digital Downloads plugin <= 3.6.7 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by James Paremain in WordPress Plugin Easy Digital Downloads versions = 3.6.7...

CVE-2026-35147

HCL DFXServer is affected by a Broken Authentication vulnerability via direct API access. The application fails to verify the user's authentication status when accessing specific API endpoints, allowing an unauthenticated attacker to interact with the APIs and perform unauthorized actions without...

CVE-2026-35147 HCL DFXServer is affected by a Broken Authentication vulnerability via direct API access.

HCL DFXServer is affected by a Broken Authentication vulnerability via direct API access. The application fails to verify the user's authentication status when accessing specific API endpoints, allowing an unauthenticated attacker to interact with the APIs and perform unauthorized actions without...

CVE-2026-35147

HCL DFXServer is affected by a Broken Authentication vulnerability via direct API access. The application fails to verify the user’s authentication status when accessing specific API endpoints, allowing an unauthenticated attacker to interact with the APIs and perform unauthorized actions without...

CVE-2026-35147 HCL DFXServer is affected by a Broken Authentication vulnerability via direct API access.

HCL DFXServer is affected by a Broken Authentication vulnerability via direct API access. The application fails to verify the user's authentication status when accessing specific API endpoints, allowing an unauthenticated attacker to interact with the APIs and perform unauthorized actions without...

EUVD-2026-44908

HCL DFXServer is affected by a Broken Authentication vulnerability via direct API access. The application fails to verify the user's authentication status when accessing specific API endpoints, allowing an unauthenticated attacker to interact with the APIs and perform unauthorized actions without...

CVE-2026-35147

HCL DFXServer is affected by a Broken Authentication vulnerability via direct API access. The application fails to verify the user's authentication status when accessing specific API endpoints, allowing an unauthenticated attacker to interact with the APIs and perform unauthorized actions without...

PT-2026-60453

Name of the Vulnerable Software and Affected Versions HCL DFXServer affected versions not specified Description Broken Authentication occurs via direct API access because the application fails to verify the authentication status of the user. This allows an unauthenticated attacker to interact wit...

CVE-2026-35147: Authorization Bypass Through User-Controlled Key

HCL DFXServer is affected by a Broken Authentication vulnerability via direct API access. The application fails to verify the user's authentication status when accessing specific API endpoints, allowing an unauthenticated attacker to interact with the APIs and perform unauthorized actions without...

BASM (Broken Authentication & Session Management) in Bitbucket Data Center

This High severity BASM Broken Authentication & Session Management vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, 9.6.0, 10.0.0, 10.1.1, 10.2.0, and 10.3.0 of Bitbucket Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS...