CVE-2026-24541 WordPress Download After Email plugin <= 2.1.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in mkscripts Download After Email download-after-email allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download After Email: from n/a through = 2.1.9...

CVE-2026-24543 WordPress Materialis Companion plugin <= 1.3.52 - Broken Access Control vulnerability

Missing Authorization vulnerability in Horea Radu Materialis Companion materialis-companion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Materialis Companion: from n/a through = 1.3.52...

CVE-2026-24541

CVE-2026-24541 is a Missing Authorization vulnerability in the WordPress plugin Download After Email (versions

CVE-2026-24544

CVE-2026-24544 refers to a Missing Authorization vulnerability in Harmonic Design HD Quiz (WordPress plugin, hd-quiz) affecting versions up to and including 2.0.9. Root cause is misconfigured access control that can permit unauthorized actions. CVSS 3.1 base score 4.3 (Medium). Wordfence and patc...

CVE-2026-24544 WordPress HD Quiz plugin <= 2.0.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Harmonic Design HD Quiz hd-quiz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HD Quiz: from n/a through = 2.0.9...

CVE-2026-24543

CVE-2026-24543 describes a Missing Authorization (Broken Access Control) vulnerability in the Materialis Companion plugin for WordPress (materialis-companion). Affected versions: up to 1.3.52. Root cause: incorrectly configured access control security levels. Impact per available data: privilege ...

CVE-2026-24541 WordPress Download After Email plugin <= 2.1.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in mkscripts Download After Email download-after-email allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download After Email: from n/a through = 2.1.9...

CVE-2026-24544 WordPress HD Quiz plugin <= 2.0.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Harmonic Design HD Quiz hd-quiz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HD Quiz: from n/a through = 2.0.9...

CVE-2026-24535 WordPress Automatic Featured Images from Videos plugin <= 1.2.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in webdevstudios Automatic Featured Images from Videos automatic-featured-images-from-videos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Automatic Featured Images from Videos: from n/a through = 1.2.7...

CVE-2026-24539

CVE-2026-24539 concerns the WordPress plugin “Protección de datos – RGPD” (versions up to and including 0.68). The issue is described as a Broken Access Control / Missing Authorization vulnerability enabling exploitation of incorrectly configured access control security levels. Public sources in ...

CVE-2026-24540

CVE-2026-24540 refers to a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin Integrate Google Drive (component integrate-google-drive) affecting versions up to and including 1.5.5. The issue arises from incorrectly configured access control, enabling unauthorized...

CVE-2026-24535 WordPress Automatic Featured Images from Videos plugin <= 1.2.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in webdevstudios Automatic Featured Images from Videos automatic-featured-images-from-videos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Automatic Featured Images from Videos: from n/a through = 1.2.7...

CVE-2026-24540 WordPress Integrate Google Drive plugin <= 1.5.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in princeahmed Integrate Google Drive integrate-google-drive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Integrate Google Drive: from n/a through = 1.5.6...

CVE-2026-24540 WordPress Integrate Google Drive plugin <= 1.5.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in princeahmed Integrate Google Drive integrate-google-drive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Integrate Google Drive: from n/a through = 1.5.6...

CVE-2026-24535

CVE-2026-24535 affects the WordPress plugin Automatic Featured Images from Videos up to version 1.2.7) or applying vendor mitigation. Connected material notes the vulnerable plugin, the affected version range, and that public advisories converge on updating beyond 1.2.7; exploitation status and i...

CVE-2026-24532 WordPress SiteLock Security plugin <= 5.0.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in SiteLock SiteLock Security – WP Hardening, Login Security & Malware Scans sitelock allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteLock Security – WP Hardening, Login Security & Malware Scans: from n/a through =...

CVE-2026-24530 WordPress WebP Conversion plugin <= 2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in sheepfish WebP Conversion webp-conversion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebP Conversion: from n/a through = 2.2...

CVE-2026-24532

CVE-2026-24532 describes a Missing Authorization (broken access control) vulnerability in the SiteLock Security plugin for WordPress (SiteLock – WP Hardening, Login Security & Malware Scans). Affected versions are up to and including 5.0.2. The issue arises from incorrect or misconfigured access ...

CVE-2026-24530 WordPress WebP Conversion plugin <= 2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in sheepfish WebP Conversion webp-conversion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebP Conversion: from n/a through = 2.2...

CVE-2026-24534

CVE-2026-24534 describes a Missing Authorization vulnerability in the uPress Booter plugin, specifically in the booter-bots-crawlers-manager component. Affected versions are Booter up to and including 1.5.7, where incorrectly configured access control security levels can allow unauthorized action...