20356 matches found
EUVD-2026-60814
Contributor Broken Access Control in WP Table Builder = 2.2.0 versions...
CVE-2026-74006 WordPress WP Table Builder plugin <= 2.2.0 - Broken Access Control vulnerability
Contributor Broken Access Control in WP Table Builder = 2.2.0 versions...
CVE-2026-74004
The WordPress plugin "Gravity Booster – Styles & Layouts for Gravity Forms" (versions ≤ 6.0) has a broken access control flaw exploitable by authenticated subscribers, allowing unauthorized access to plugin functions. CVSS 3.1 score is 5.4 (MEDIUM) with network attack vector, low privileges requi...
CVE-2026-74004 WordPress Gravity Booster – Styles & Layouts for Gravity Forms plugin <= 6.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in Gravity Booster Styles & Layouts for Gravity Forms = 6.0 versions...
CVE-2026-74004 WordPress Gravity Booster – Styles & Layouts for Gravity Forms plugin <= 6.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in Gravity Booster Styles & Layouts for Gravity Forms = 6.0 versions...
EUVD-2026-60813
Subscriber Broken Access Control in Gravity Booster Styles & Layouts for Gravity Forms = 6.0 versions...
CVE-2026-74003
CVE-2026-74003 is a Broken Access Control vulnerability in the RomethemeForm For Elementor WordPress plugin, affecting versions
EUVD-2026-60812
Contributor Broken Access Control in RomethemeForm For Elementor = 1.2.6 versions...
CVE-2026-74003 WordPress RomethemeForm For Elementor plugin <= 1.2.6 - Broken Access Control vulnerability
Contributor Broken Access Control in RomethemeForm For Elementor = 1.2.6 versions...
CVE-2026-74003 WordPress RomethemeForm For Elementor plugin <= 1.2.6 - Broken Access Control vulnerability
Contributor Broken Access Control in RomethemeForm For Elementor = 1.2.6 versions...
CVE-2026-73995
The WordPress User Registration plugin (versions ≤ 5.2.6) has a broken authentication flaw allowing subscribers to bypass access controls; CVSS 5.4 (MEDIUM). CISA SSVC reports no active exploitation. No exploit code is provided; upgrade beyond 5.2.6 to remediate. Details via Patchstack reference.
CVE-2026-73995 WordPress User Registration plugin <= 5.2.6 - Broken Authentication vulnerability
Subscriber Broken Authentication in User Registration = 5.2.6 versions...
CVE-2026-73995 WordPress User Registration plugin <= 5.2.6 - Broken Authentication vulnerability
Subscriber Broken Authentication in User Registration = 5.2.6 versions...
EUVD-2026-60809
Subscriber Broken Authentication in User Registration = 5.2.6 versions...
CVE-2026-73994 WordPress Charitable plugin <= 1.8.11.3 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Charitable = 1.8.11.3 versions...
CVE-2026-73994 WordPress Charitable plugin <= 1.8.11.3 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Charitable = 1.8.11.3 versions...
EUVD-2026-60808
Unauthenticated Broken Access Control in Charitable = 1.8.11.3 versions...
CVE-2026-73994
CVE-2026-73994 is an unauthenticated Broken Access Control vulnerability in the WordPress Charitable plugin , affecting versions 1.8.11.3 and earlier . The flaw allows a remote attacker with no privileges to modify data, resulting in a high integrity impact (CVSS 3.1 score: 7.5 HIGH ). CISA's SSV...