19764 matches found
CVE-2026-95587: Missing Authorization
Unauthenticated Broken Access Control in Hostinger Migrator = 1.0 versions...
CVE-2026-94499: Missing Authorization
Subscriber Broken Access Control in FormGent = 1.12.2 versions...
CVE-2026-94074: Missing Authorization
Unauthenticated Broken Access Control in Simply Schedule Appointments = 1.6.12.29 versions...
CVE-2026-102582: Direct Request
A flaw was found in Moodle. The manual enrolment management page did not properly check whether the manual enrolment plugin was disabled, allowing users with enrolment permissions to access the page directly by navigating to its URL. Consequently, an authorized user could manage manual enrolments...
PT-2026-103162
Unauthenticated Broken Access Control in Simply Schedule Appointments = 1.6.12.29 versions...
PT-2026-103177
Subscriber Broken Access Control in FormGent = 1.12.2 versions...
PT-2026-103186
Unauthenticated Broken Access Control in Hostinger Migrator = 1.0 versions...
PT-2026-103202
Subscriber Broken Access Control in MakeCommerce for WooCommerce = 4.1.0 versions...
PT-2026-103258
Contributor Broken Access Control in The Events Calendar = 6.17.5 versions...
PT-2026-103251
Subscriber Broken Access Control in Prevent files / folders access = 2.6.7 versions...
PT-2026-103235
Subscriber Broken Access Control in MCP Content Manager Lite = 1.1.0 versions...
PT-2026-103491
Unauthenticated Broken Access Control in Ultimate Maps by Supsystic = 1.5.5 versions...
PT-2026-103203
Unauthenticated Broken Access Control in WP Express Checkout Accept PayPal Payments = 2.4.9 versions...
PT-2026-103486
Subscriber Broken Access Control in Optimole = 4.2.14 versions...
PT-2026-103048
The Broken Link Notifier WordPress plugin before 2.0.0.1 does not re-validate the destination of redirects when checking links, allowing unauthenticated attackers to bypass its internal-address filter and make the server send requests to internal services...
PT-2026-103169
Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms = 2.7.2 versions...
CVE-2026-94120: Missing Authorization
Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms = 2.7.2 versions...
CVE-2026-97247: Missing Authorization
Unauthenticated Broken Access Control in Blocksy Companion = 2.1.55 versions...