WordPress WXD Backup Lite plugin <= 1.0.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WXD Backup Lite versions = 1.0.2...

WordPress FluentBooking Pro plugin < 2.5.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin FluentBooking Pro versions 2.5.0...

WordPress WP2LEADS plugin <= 3.5.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by johska in WordPress Plugin WP2LEADS versions = 3.5.7...

CVE-2023-34965

CVE-2023-34965 SSPanel UIM هو نظام إدارة مبيعات خدمات وكالة متعدد الأغراض مصمم خصيصًا لبروتوكولات Shadowsocks / V2Ray / Trojan. الإصدارات من SSPanel-Uim قبل 2023.3 لا تقيد الوصول إلى واجهة /link/، مما قد يؤدي إلى تسرب معلومات اشتراك المستخدم. التفاصيل في:...

WordPress Fluent Affiliate Pro plugin <= 1.6.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Fluent Affiliate Pro versions = 1.6.4...

WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ratchanon Chamnankit in WordPress Plugin WP Event Solution versions = 4.1.25...

CVE-2022-1329-WordPress-Elementor-3.6.0-3.6.1-3.6.2-Remote-Code-Execution-Exploit

إضافة ووردبريس - Elementor 3.6.0 3.6.1 3.6.2 تنفيذ أوامر عن بُعد Google Dork: none Date: April 16 2022 Exploit Author: AkuCyberSec https://github.com/AkuCyberSec Vendor Homepage: https://elementor.com/ Software Link: https://wordpress.org/plugins/elementor/advanced/ scroll down to select the...

CVE-2026-105421 WordPress Kit (formerly ConvertKit) for WooCommerce plugin <= 2.2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Kit Kit formerly ConvertKit for WooCommerce convertkit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kit formerly ConvertKit for WooCommerce: from n/a through 2.2.0...

CVE-2026-105421 WordPress Kit (formerly ConvertKit) for WooCommerce plugin <= 2.2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Kit Kit formerly ConvertKit for WooCommerce convertkit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kit formerly ConvertKit for WooCommerce: from n/a through 2.2.0...

CVE-2026-105421

The WordPress Kit (formerly ConvertKit) for WooCommerce plugin (versions

WordPress Kit (formerly ConvertKit) for WooCommerce plugin <= 2.2.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin Kit formerly ConvertKit for WooCommerce versions = 2.2.0...

WordPress Morning for WooCommerce plugin <= 2.4.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by ParkHyunWoo in WordPress Plugin Morning for WooCommerce versions = 2.4.1...

stump-smartlist-bola

Stump: Smart List Takeover via Broken Access Control BOLA...

WordPress Wise Chat plugin <= 3.4.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by takito in WordPress Plugin Wise Chat versions = 3.4.3...

WordPress App for Cloudflare® plugin <= 1.10.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by takito in WordPress Plugin App for Cloudflare® versions = 1.10.1...

WordPress PayPlug for WooCommerce (Official) plugin <= 3.1.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Jakub Herman in WordPress Plugin PayPlug for WooCommerce Official versions = 3.1.0...

CVE-2026-103684

The WP Event Solution plugin (versions n/a through 4.1.25 ) is vulnerable to a Missing Authorization (CWE-862) issue. This Broken Access Control vulnerability allows for the exploitation of incorrectly configured access control security levels. The impact involves potential low integrity changes,...

CVE-2026-103684 WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability

Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25...

CVE-2026-103684 WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability

Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25...

WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin WP Event Solution versions = 4.1.25...