19253 matches found
CVE-2026-97277 WordPress Social Boost plugin <= 3.6.2 - Broken Access Control vulnerability
Subscriber Broken Access Control in Social Boost = 3.6.2 versions...
CVE-2026-97277 WordPress Social Boost plugin <= 3.6.2 - Broken Access Control vulnerability
Subscriber Broken Access Control in Social Boost = 3.6.2 versions...
EUVD-2026-90838
Subscriber Broken Access Control in Social Boost = 3.6.2 versions...
CVE-2026-97277
The Social Boost WordPress plugin, versions 3.6.2 and below , is affected by a Broken Access Control vulnerability (CWE-862) involving subscriber privileges. This flaw allows for unauthorized actions due to insufficient access control checks. The vulnerability has a High severity rating with a CV...
EUVD-2026-90857
Subscriber Broken Access Control in Aruba Migration Tool = 1.0.4 versions...
CVE-2026-97258 WordPress Aruba Migration Tool plugin <= 1.0.4 - Broken Access Control vulnerability
Subscriber Broken Access Control in Aruba Migration Tool = 1.0.4 versions...
CVE-2026-97258
The WordPress Aruba Migration Tool plugin (versions
CVE-2026-62073
The WP Full Stripe Free WordPress plugin (versions
EUVD-2026-90853
Unauthenticated Broken Access Control in WP Full Stripe Free = 8.5.6 versions...
CVE-2026-62073 WordPress WP Full Stripe Free plugin <= 8.5.6 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Full Stripe Free = 8.5.6 versions...
CVE-2026-66246
iControl is affected by a Broken Access Control vulnerability, which could allow an attacker to exploit missing authentication checks or insecure direct object references IDOR, enabling privilege escalation and the unauthorized modification or deletion of sensitive application data...
WordPress Aruba Migration Tool plugin <= 1.0.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Aruba Migration Tool versions = 1.0.4...
CVE-2026-66246 HCL iControl is affected by multiple security vulnerabilities
iControl is affected by a Broken Access Control vulnerability, which could allow an attacker to exploit missing authentication checks or insecure direct object references IDOR, enabling privilege escalation and the unauthorized modification or deletion of sensitive application data...
CVE-2026-66246
HCL iControl is affected by a Broken Access Control vulnerability. The issue stems from missing authentication checks or insecure direct object references (IDOR) , which could enable an attacker to perform privilege escalation and perform unauthorized modification or deletion of sensitive applica...
CVE-2026-66246 HCL iControl is affected by multiple security vulnerabilities
iControl is affected by a Broken Access Control vulnerability, which could allow an attacker to exploit missing authentication checks or insecure direct object references IDOR, enabling privilege escalation and the unauthorized modification or deletion of sensitive application data...
EUVD-2026-90813
iControl is affected by a Broken Access Control vulnerability, which could allow an attacker to exploit missing authentication checks or insecure direct object references IDOR, enabling privilege escalation and the unauthorized modification or deletion of sensitive application data...
CVE-2024-10542
PoC уязвимостей CVE-2024-10542 и CVE-2024-10781: Нарушенная аутентификация в плагине Spam protection, AntiSpam, FireWall от CleanTalk = 6.43.2 Отказ от ответственности: Информация, предоставленная в этом документе касательно CVE-2024-10542, предназначена только для обучения и образования. Мы не...
CVE-2026-62063 WordPress WpTravelly plugin <= 2.3.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.1...
CVE-2026-62063 WordPress WpTravelly plugin <= 2.3.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpTravelly: from n/a through 2.3.1...