20358 matches found
BASM (Broken Authentication & Session Management) in Jira Data Center
This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-21582 was introduced in version 9.12.14, 10.3.0, and 11.3.0 of Jira Software Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.8, allows an...
WordPress Online Contact Widget plugin <= 1.3.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Online Contact Widget versions = 1.3.0...
WordPress MultiVendorX plugin <= 5.0.14 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Jakub Herman in WordPress Plugin MultiVendorX versions = 5.0.14...
WordPress Flutterwave WooCommerce plugin <= 3.3.0 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by Jakub Herman in WordPress Plugin Flutterwave WooCommerce versions = 3.3.0...
WordPress Piraeus Bank WooCommerce Payment Gateway plugin 3.2.0 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by Jakub Herman in WordPress Plugin Piraeus Bank WooCommerce Payment Gateway versions 3.2.0...
WordPress MWB HubSpot for WooCommerce plugin <= 1.6.7 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by Jakub Herman in WordPress Plugin MWB HubSpot for WooCommerce versions = 1.6.7...
WordPress Popup by Supsystic plugin <= 1.13.0 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by Asim Alshaya in WordPress Plugin Popup by Supsystic versions = 1.13.0...
WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Asim Alshaya in WordPress Plugin Ultimate Maps by Supsystic versions 1.5.0...
WordPress MasterStudy LMS plugin <= 3.7.41 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by dutafi in WordPress Plugin MasterStudy LMS versions = 3.7.41...
WordPress SupportCandy plugin <= 3.5.1 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by hackthesoul in WordPress Plugin SupportCandy versions = 3.5.1...
WordPress Charitable plugin <= 1.8.11.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Charitable versions = 1.8.11.3...
WordPress Appointment Hour Booking plugin <= 1.5.91 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Tiago Ventura @perses in WordPress Plugin Appointment Hour Booking versions = 1.5.91...
ANT-2026-BTRNT5A3 · supabase/supabase · broken-access-control
broken-access-control high Severity Claude high · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-BTRNT5A3: Server action accepts client-controlled CRM backend targets submitFormAction is exporte...
EUVD-2026-60546
Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under certain circumstances when the file path to an artefact in a page is manipulated...
EUVD-2026-60541
Mattermost versions 11.7.x = 11.7.6, 10.11.x = 10.11.21, 11.8.x = 11.8.3 fail to enforce PermissionManageBoardRoles on the channelId field of the batch endpoint, which allows an authenticated board editor to relink any board they can edit to an arbitrary channel via a crafted PATCH request...
CVE-2026-74004: Missing Authorization
Subscriber Broken Access Control in Gravity Booster – Styles & Layouts for Gravity Forms = 6.0 versions...
PT-2026-80373
grepai Uses a Broken or Risky Cryptographic Algorithm in github.com/yoanbernabeu/grepai...
CVE-2026-74006: Missing Authorization
Contributor Broken Access Control in WP Table Builder = 2.2.0 versions...