20358 matches found
CVE-2026-74003: Missing Authorization
Contributor Broken Access Control in RomethemeForm For Elementor = 1.2.6 versions...
PT-2026-77118
Name of the Vulnerable Software and Affected Versions Piraeus Bank WooCommerce Payment Gateway version 3.2.0 Description The software contains a broken authentication mechanism that allows unauthenticated access. Recommendations At the moment, there is no information about a newer version that...
PT-2026-80301
Summary Repo under test: https://github.com/Netflix/lemur PUT /api/1/certificates//revoke authorizes the caller against the Lemur database row creator == current user, or CertificatePermission over the row's roles rather than the underlying CA-side certificate identity. Separately, POST...
CVE-2026-32481: Authentication Bypass Using an Alternate Path or Channel
Unauthenticated Broken Authentication in Ezoic = 2.22.11 versions...
PT-2026-78046
Name of the Vulnerable Software and Affected Versions Oracle BI Publisher version 8.2.0.0.0 Oracle BI Publisher version 12.2.1.4.0 Oracle BI Publisher version 26.1.0.0.0 Description A security flaw in the BI Platform Security component allows a low privileged attacker with network access via HTTP...
PT-2026-77034
Unauthenticated Broken Access Control in WP Sort Order = 1.3.5 versions...
PT-2026-77188
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend comment operations allow a low-privileged Author to manage comments under another Author's posts. The admin/controller/content/comment.php and...
CVE-2026-48744: Improper Authorization
Saleor is an e-commerce platform. From 3.14.67 until 3.21.67, 3.22.63, and 3.23.22, a broken authorization check in saleor/permission/utils.py can incorrectly authorize unauthenticated GraphQL requests. The flaw permits anonymous callers to use the channelUpdate mutation to change channel order...
PT-2026-77128
Contributor Broken Access Control in WP Table Builder = 2.2.0 versions...
PT-2026-77633
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Customer Care versions 12.2.3 through 12.2.15 Description A flaw in the Internal Operations component of Oracle Customer Care allows a high privileged attacker with network access via HTTP to compromise the syste...
PT-2026-77106
Unauthenticated Broken Access Control in Ultimate Maps by Supsystic 1.5.0 versions...
PT-2026-77051
Unauthenticated Broken Authentication in Ezoic = 2.22.11 versions...
CVE-2026-73352: Missing Authorization
Unauthenticated Broken Access Control in GiveWP = 4.16.5.1 versions...
PT-2026-77116
Name of the Vulnerable Software and Affected Versions MWB HubSpot for WooCommerce versions prior to 1.6.8 Description The software contains a broken authentication mechanism that allows users with Subscriber privileges to bypass authentication requirements. Recommendations Update MWB HubSpot for...
CVE-2026-21582: Improper Authentication
This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to perfor...
CVE-2026-73399: Authentication Bypass Using an Alternate Path or Channel
Unauthenticated Broken Authentication in Flutterwave WooCommerce = 3.3.0 versions...
CVE-2026-73398: Authentication Bypass Using an Alternate Path or Channel
Unauthenticated Broken Authentication in Piraeus Bank WooCommerce Payment Gateway 3.2.0 versions...
CVE-2026-73995: Authentication Bypass by Spoofing
Subscriber Broken Authentication in User Registration = 5.2.6 versions...