WordPress CoCart – Headless ecommerce plugin <= 4.8.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by VanTastic in WordPress Plugin CoCart – Headless ecommerce versions = 4.8.4...

EUVD-2026-48138

Subscriber Broken Access Control in Cyr to Lat reloaded – transliteration of links and file names = 1.3.3 versions...

CVE-2026-65537

CVE-2026-65537 concerns a WordPress plugin, Cyr to Lat reloaded – transliteration of links and file names , affected in versions

CVE-2026-65531

CVE-2026-65531 affects WordPress Qubely plugin versions up to 1.8.14 with an unauthenticated broken access control vulnerability. Connected documents confirm unauthenticated access and broken access control but do not provide root cause, affected files, exploitation details, or a fix. CVSS/metric...

EUVD-2026-48131

Subscriber Broken Access Control in TemplateSpare = 4.2.2 versions...

CVE-2026-65530

Technical details for CVE-2026-65530 are not publicly available in the provided documents; the description notes a broken access control in TemplateSpare

EUVD-2026-48130

Unauthenticated Broken Access Control in Graphina = 3.1.12 versions...

CVE-2026-65529

Technical details are not publicly available in the provided documents; monitor for updates on the Graphina WordPress plugin

CVE-2026-65525

CVE-2026-65525 affects the WordPress Civi Framework plugin up to version 2.2.0. The issue is unauthenticated broken access control, enabling access to resources or actions that should be restricted. The available documents identify the affected software and the vulnerability class but do not prov...

CVE-2026-65524

Technical details for CVE-2026-65524 are not publicly available in the provided documents. Monitor for updates.

EUVD-2026-48125

Contributor Broken Access Control in Avada Custom Branding = 1.2 versions...

CVE-2026-65506

CVE-2026-65506 affects the WordPress plugin MP3 Audio Player for Music, Radio & Podcast by Sonaar, versions

EUVD-2026-48111

Unauthenticated Broken Access Control in Manual - Documentation, Knowledge Base & Education WordPress Theme = 7.5.4 versions...

CVE-2026-65500

CVE-2026-65500 concerns the WordPress Manual - Documentation, Knowledge Base & Education Theme, affected through version

CVE-2026-65499

CVE-2026-65499 affects the WordPress plugin PeproDev Ultimate Invoice, version

EUVD-2026-48110

Unauthenticated Broken Access Control in PeproDev Ultimate Invoice = 2.2.6 versions...

EUVD-2026-48106

Unauthenticated Broken Access Control in Dokan Pro = 5.0.3 versions...

CVE-2026-65495

The CVE-2026-65495 entry describes an unauthenticated Broken Access Control vulnerability in the WordPress Dokan Pro plugin versions

CVE-2026-65491

Technical details for CVE-2026-65491 are not publicly available in the provided documents; monitor for updates.

CVE-2026-65489

CVE-2026-65489 affects the WordPress plugin “LA-Studio Element Kit for Elementor” up to version 1.6.2. The issue is described as Unauthenticated Broken Access Control, allowing access to restricted functionality without credentials. The referenced CVSS 3.1 base score is 5.3 (MEDIUM) with network ...