EUVD-2026-48162

Subscriber Broken Access Control in WP Booking System 5.12.8.1 versions...

CVE-2026-57367

CVE-2026-57367 affects the WordPress plugin WP Booking System, specifically versions prior to 5.12.8.1. The vulnerability is a Broken Access Control issue impacting the plugin’s ability to enforce access permissions, with exposed integrity risk (High) and limited availability impact as per Patchs...

EUVD-2026-48161

Subscriber Broken Access Control in Participants Database = 2.7.8.4 versions...

CVE-2026-27422

The CVE-2026-27422 entry concerns the WordPress YT Player plugin (versions

EUVD-2026-48160

Unauthenticated Broken Access Control in YT Player = 2.0.9 versions...

CVE-2026-27418

The CVE-2026-27418 entry concerns the WordPress plugin WP Fast Total Search

EUVD-2026-48159

Unauthenticated Broken Access Control in WP Fast Total Search = 1.81.282 versions...

EUVD-2026-48157

Unauthenticated Broken Access Control in MarketKing = 2.1.40 versions...

CVE-2026-27399

CVE-2026-27399 concerns the WordPress MarketKing plugin, versions ≤ 2.1.40. The connected documents describe an Unauthenticated Broken Access Control vulnerability in MarketKing, meaning an unauthenticated attacker can bypass access controls. The exact impact details (which data or actions are ex...

EUVD-2026-48155

Subscriber Broken Access Control in uListing = 2.2.0 versions...

EUVD-2026-48156

Contributor Broken Access Control in uListing = 2.2.0 versions...

CVE-2026-27392

CVE-2026-27392 affects the WordPress uListing plugin

CVE-2026-27377

CVE-2026-27377 affects the WordPress plugin QuickCal – Appointment Booking Calendar for WordPress (versions

EUVD-2026-48152

Unauthenticated Broken Access Control in Ditty = 3.1.66 versions...

CVE-2026-27355

CVE-2026-27355 affects WordPress Ditty plugin versions

CVE-2026-25427

CVE-2026-25427 affects the WordPress plugin eRoom (versions ≤ 1.7.1). The description identifies a Broken Access Control issue for subscribers, but the available documents do not provide technical details, affected files, root cause, exploitability, or remediation steps. No exploitation informati...

CVE-2026-25466

CVE-2026-25466 affects the WordPress WP Go Maps plugin (vulnerable:

CVE-2026-25424

CVE-2026-25424 concerns the WordPress Mediavine Control Panel plugin, affected in versions

EUVD-2026-48148

Contributor Broken Access Control in Mediavine Control Panel = 2.10.10 versions...

WordPress Post My CF7 Form plugin <= 6.2.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mitchell in WordPress Plugin Post My CF7 Form versions = 6.2.0...