EUVD-2026-90221

Subscriber Broken Access Control in Optimole = 4.2.14 versions...

CVE-2026-102397 WordPress Ultimate Maps by Supsystic plugin <= 1.5.5 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Ultimate Maps by Supsystic = 1.5.5 versions...

CVE-2026-102397 WordPress Ultimate Maps by Supsystic plugin <= 1.5.5 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Ultimate Maps by Supsystic = 1.5.5 versions...

CVE-2026-102397

The WordPress Ultimate Maps by Supsystic plugin, version 1.5.5 and below , is affected by an unauthenticated Broken Access Control vulnerability. While the vulnerability allows for unauthorized access, the provided documents do not specify the exact component, root cause, or practical consequence...

EUVD-2026-90213

Unauthenticated Broken Access Control in Ultimate Maps by Supsystic = 1.5.5 versions...

WordPress Ultimate Maps by Supsystic plugin <= 1.5.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin Ultimate Maps by Supsystic versions = 1.5.5...

CVE-2026-97285

Contributor Broken Access Control in The Events Calendar = 6.17.5 versions...

CVE-2026-97267

Subscriber Broken Access Control in Prevent files / folders access = 2.6.7 versions...

CVE-2026-97247

Unauthenticated Broken Access Control in Blocksy Companion = 2.1.55 versions...

CVE-2026-97243

Subscriber Broken Access Control in AllAble Connector = 0.13.4 versions...

CVE-2026-97239

Subscriber Broken Access Control in MCP Content Manager Lite = 1.1.0 versions...

CVE-2026-97197

Unauthenticated Broken Access Control in WordPress Backup & Migration = 1.6.0 versions...

CVE-2026-96817

Subscriber Broken Access Control in MakeCommerce for WooCommerce = 4.1.0 versions...

CVE-2026-96818

Unauthenticated Broken Access Control in WP Express Checkout Accept PayPal Payments = 2.4.9 versions...

CVE-2026-96348

Unauthenticated Broken Access Control in Bookly = 28.2 versions...

CVE-2026-95587

Unauthenticated Broken Access Control in Hostinger Migrator = 1.0 versions...

CVE-2026-94499

Subscriber Broken Access Control in FormGent = 1.12.2 versions...

CVE-2026-94120

Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms = 2.7.2 versions...

CVE-2026-94074

Unauthenticated Broken Access Control in Simply Schedule Appointments = 1.6.12.29 versions...

WordPress Optimole plugin <= 4.2.14 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dthangws in WordPress Plugin Optimole versions = 4.2.14...