CVE-2026-97277

Subscriber Broken Access Control in Social Boost = 3.6.2 versions...

CVE-2026-97281

Subscriber Broken Access Control in WP Project Manager = 4.0.7 versions...

CVE-2026-97297

Subscriber Broken Access Control in Gratisfaction = 4.6.3 versions...

CVE-2026-97258

Subscriber Broken Access Control in Aruba Migration Tool = 1.0.4 versions...

CVE-2026-62073

Unauthenticated Broken Access Control in WP Full Stripe Free = 8.5.6 versions...

CVE-2024-0679

CVE-2024-0679 ColorMag = 3.1.2 - Отсутствие авторизации для аутентифицированных подписчик+ произвольная установка/активация плагинов Описание: Тема ColorMag для WordPress уязвима к несанкционированному доступу из-за отсутствия проверки прав доступа в функции pluginactioncallback во всех версиях д...

CVE-2025-47646

🔐 CVE-2025-47646 – PSW Front-end Login & Registration = 1.12 📌 Информация о плагине Плагин : PSW Front-end Login & Registration Уязвимая версия : = 1.12 CVE : CVE-2025-47646 Критичность : Высокая CVSS 9.8 Тип уязвимости : Нарушение аутентификации Требуемые привилегии : Без аутентификации Исправле...

CVE-2026-97280

The Review Schema WordPress plugin (version 3.1.0 ) is vulnerable to a Missing Authorization flaw (CWE-862). This Broken Access Control vulnerability allows an attacker to exploit incorrectly configured access control security levels . The vulnerability impacts the integrity and availability of t...

CVE-2026-97280 WordPress Review Schema plugin 3.1.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mamunur Rashid Review Schema review-schema allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Review Schema: 3.1.0...

CVE-2026-97280 WordPress Review Schema plugin 3.1.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mamunur Rashid Review Schema review-schema allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Review Schema: 3.1.0...

CVE-2026-97297 WordPress Gratisfaction plugin <= 4.6.3 - Broken Access Control vulnerability

Subscriber Broken Access Control in Gratisfaction = 4.6.3 versions...

EUVD-2026-90841

Subscriber Broken Access Control in Gratisfaction = 4.6.3 versions...

CVE-2026-97297

The Gratisfaction WordPress plugin (versions

CVE-2026-97281 WordPress WP Project Manager plugin <= 4.0.7 - Broken Access Control vulnerability

Subscriber Broken Access Control in WP Project Manager = 4.0.7 versions...

CVE-2026-97281

The WP Project Manager plugin for WordPress (versions

EUVD-2026-90839

Subscriber Broken Access Control in WP Project Manager = 4.0.7 versions...

CVE-2026-97277 WordPress Social Boost plugin <= 3.6.2 - Broken Access Control vulnerability

Subscriber Broken Access Control in Social Boost = 3.6.2 versions...

CVE-2026-97277 WordPress Social Boost plugin <= 3.6.2 - Broken Access Control vulnerability

Subscriber Broken Access Control in Social Boost = 3.6.2 versions...

EUVD-2026-90838

Subscriber Broken Access Control in Social Boost = 3.6.2 versions...

CVE-2026-97277

The Social Boost WordPress plugin, versions 3.6.2 and below , is affected by a Broken Access Control vulnerability (CWE-862) involving subscriber privileges. This flaw allows for unauthorized actions due to insufficient access control checks. The vulnerability has a High severity rating with a CV...