CVE-2026-54802: Missing Authorization

Unauthenticated Broken Authentication in SMS Alert Order Notifications = 3.9.3 versions...

CVE-2026-54804: Authentication Bypass Using an Alternate Path or Channel

Subscriber Broken Authentication in Melhor Envio = 2.16.3 versions...

CVE-2026-49071: Authentication Bypass Using an Alternate Path or Channel

Unauthenticated Broken Authentication in WooCommerce Dropshipping = 5.2.4 versions...

CVE-2026-42629: Authentication Bypass Using an Alternate Path or Channel

Unauthenticated Broken Authentication in PowerPack Pro for Elementor v2.13.0 versions...

CVE-2026-25439: Authentication Bypass Using an Alternate Path or Channel

Unauthenticated Broken Authentication in Booknetic = 4.8.5 versions...

PT-2026-50333

Unauthenticated Broken Authentication in WooCommerce Dropshipping = 5.2.4 versions...

PT-2026-50328

Unauthenticated Broken Authentication in PowerPack Pro for Elementor v2.13.0 versions...

PT-2026-50357

Subscriber Broken Authentication in Melhor Envio = 2.16.3 versions...

PT-2026-50355

Unauthenticated Broken Authentication in SMS Alert Order Notifications = 3.9.3 versions...

WordPress Melhor Envio plugin <= 2.16.3 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by HieuPenguinnn in WordPress Plugin Melhor Envio versions = 2.16.3...

WordPress SMS Alert Order Notifications plugin <= 3.9.3 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Jakub Herman in WordPress Plugin SMS Alert Order Notifications versions = 3.9.3...

EUVD-2026-36989

Subscriber Broken Authentication in AutomatorWP = 5.6.7 versions...

EUVD-2026-36987

Unauthenticated Broken Authentication in ReviewX = 2.3.6 versions...

CVE-2026-49764

Unauthenticated Broken Authentication in RegistrationMagic = 6.0.8.6 versions...

CVE-2026-49110

Unauthenticated Broken Authentication in Upsell Order Bump Offer for WooCommerce = 3.1.4 versions...

CVE-2026-48970

Unauthenticated Broken Authentication in Really Simple SSL = 9.5.10 versions...

CVE-2026-42743

Unauthenticated Broken Authentication in Masteriyo - LMS = 2.1.8 versions...

CVE-2026-42668

Unauthenticated Broken Authentication in Email Marketing for WooCommerce by Omnisend = 1.18.0 versions...

CVE-2026-42411

Unauthenticated Broken Authentication in CloudSecure WP Security = 1.4.7 versions...

CVE-2026-40799

Unauthenticated Broken Authentication in Simple Cloudflare Turnstile = 1.38.0 versions...