19881 matches found
CVE-2026-81799
An unauthenticated Broken Access Control vulnerability was discovered in the Return Refund and Exchange For WooCommerce WordPress plugin, affecting versions ≤ 4.6.4 . The flaw was identified by babyhack (@OPCIA) and carries a CVSS 3.1 score of 7.5 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C...
CVE-2026-81799 WordPress Return Refund and Exchange For WooCommerce plugin <= 4.6.4 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Return Refund and Exchange For WooCommerce = 4.6.4 versions...
CVE-2026-81796 WordPress WP Travel plugin <= 12.0.3 - Broken Authentication vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in WEN Solutions WP Travel wp-travel allows Password Recovery Exploitation.This issue affects WP Travel: from n/a through 12.0.3...
CVE-2026-81796 WordPress WP Travel plugin <= 12.0.3 - Broken Authentication vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in WEN Solutions WP Travel wp-travel allows Password Recovery Exploitation.This issue affects WP Travel: from n/a through 12.0.3...
CVE-2026-81796
CVE-2026-81796 is an unauthenticated Broken Authentication vulnerability in the WordPress WP Travel plugin , affecting versions
EUVD-2026-75527
Unauthenticated Broken Authentication in WP Travel = 12.0.3 versions...
CVE-2026-81794 WordPress Shirt Product Designer for WooCommerce plugin 1.0.4 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Shirt Product Designer for WooCommerce 1.0.4 versions...
EUVD-2026-75525
Unauthenticated Broken Access Control in Shirt Product Designer for WooCommerce 1.0.4 versions...
CVE-2026-81794 WordPress Shirt Product Designer for WooCommerce plugin 1.0.4 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Shirt Product Designer for WooCommerce 1.0.4 versions...
CVE-2026-81794
CVE-2026-81794 affects the Shirt Product Designer for WooCommerce plugin version 1.0.4 , introducing an unauthenticated Broken Access Control vulnerability. An attacker can exploit this over the network with low complexity, no required privileges, and no user interaction, resulting in a high impa...
CVE-2026-81793
An unauthenticated Broken Access Control vulnerability affects the WordPress Salon booking system plugin in versions 10.31.5 and earlier . Discovered by Tiago Ventura (@perses), the flaw allows attackers to access or modify data with low integrity and low availability impact without requiring any...
CVE-2026-81793 WordPress Salon booking system plugin <= 10.31.9 - Broken Access Control vulnerability
Missing Authorization vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Salon booking system: from n/a through 10.31.9...
EUVD-2026-75524
Unauthenticated Broken Access Control in Salon booking system = 10.31.5 versions...
CVE-2026-81793 WordPress Salon booking system plugin <= 10.31.9 - Broken Access Control vulnerability
Missing Authorization vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Salon booking system: from n/a through 10.31.9...
CVE-2026-81788 WordPress IMPress for IDX Broker plugin <= 3.3.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in IMPress for IDX Broker = 3.3.0 versions...
CVE-2026-81787 WordPress IMPress for IDX Broker plugin <= 3.3.0 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in IMPress for IDX Broker = 3.3.0 versions...
CVE-2026-81788 WordPress IMPress for IDX Broker plugin <= 3.3.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in IMPress for IDX Broker = 3.3.0 versions...
CVE-2026-81787 WordPress IMPress for IDX Broker plugin <= 3.3.0 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in IMPress for IDX Broker = 3.3.0 versions...