20358 matches found
CVE-2026-73350 WordPress SupportCandy plugin <= 3.5.1 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in SupportCandy = 3.5.1 versions...
CVE-2026-73350 WordPress SupportCandy plugin <= 3.5.1 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in SupportCandy = 3.5.1 versions...
EUVD-2026-60776
Unauthenticated Broken Access Control in GiveWP 4.16.6 versions...
CVE-2026-73348 WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in GiveWP 4.16.6 versions...
EUVD-2026-60777
Unauthenticated Broken Authentication in SupportCandy = 3.5.1 versions...
CVE-2026-66679
WordPress plugin Appointment Hour Booking (≤1.5.91) has an unauthenticated broken access control flaw, allowing network-based attackers to alter data or cause partial disruption. No in-the-wild exploitation is reported; updating to version 1.5.92+ is recommended.
CVE-2026-66679 WordPress Appointment Hour Booking plugin <= 1.5.91 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Appointment Hour Booking = 1.5.91 versions...
CVE-2026-66679
Unauthenticated Broken Access Control in Appointment Hour Booking = 1.5.91 versions...
CVE-2026-66679 WordPress Appointment Hour Booking plugin <= 1.5.91 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Appointment Hour Booking = 1.5.91 versions...
EUVD-2026-60933
Unauthenticated Broken Access Control in Appointment Hour Booking = 1.5.91 versions...
EUVD-2026-60931
Unauthenticated Broken Access Control in MultiVendorX = 5.0.14 versions...
CVE-2026-66651 WordPress MultiVendorX plugin <= 5.0.20 - Broken Access Control vulnerability
Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MultiVendorX: from n/a through 5.0.20...
CVE-2026-66651
Unauthenticated Broken Access Control in MultiVendorX = 5.0.14 versions...
CVE-2026-66651 WordPress MultiVendorX plugin <= 5.0.20 - Broken Access Control vulnerability
Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MultiVendorX: from n/a through 5.0.20...
CVE-2026-66651
MultiVendorX WordPress plugin (versions ≤ 5.0.14) has an unauthenticated broken access control flaw. CVSS 6.5 (Medium) — network-reachable, no auth needed, low confidentiality and integrity impact. No patch version or exploit details provided; update once a fixed release is available. Monitor Pat...
CVE-2026-32549 WordPress ThumbPress plugin < 6.5 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in ThumbPress 6.5 versions...
EUVD-2026-60911
Unauthenticated Broken Access Control in ThumbPress 6.5 versions...
CVE-2026-32549
Unauthenticated Broken Access Control in ThumbPress 6.5 versions...