20441 matches found
CVE-2026-115949 WordPress Better Post & Filter Widgets for Elementor plugin <= 1.9.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP Smart Widgets Better Post & Filter Widgets for Elementor better-post-filter-widgets-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Better Post & Filter Widgets for Elementor: from n/a through 1.9.1...
WordPress Better Post & Filter Widgets for Elementor plugin <= 1.9.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Oly Hossen in WordPress Plugin Better Post & Filter Widgets for Elementor versions = 1.9.1...
CVE-2026-115614 WordPress Booking and Rental Manager plugin <= 2.8.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Magepeople inc. Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Manager: from n/a through 2.8.2...
CVE-2026-115614
The Booking and Rental Manager (booking-and-rental-manager-for-woocommerce) plugin by Magepeople inc. is vulnerable to a Missing Authorization vulnerability in versions through 2.8.2 . The flaw allows for Exploiting Incorrectly Configured Access Control Security Levels . While the specific techni...
WordPress Booking and Rental Manager plugin <= 2.8.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Sangho Lee in WordPress Plugin Booking and Rental Manager versions = 2.8.2...
CVE-2026-110377 WordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.2.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in VillaTheme Bopo – WooCommerce Product Bundle Builder bopo-woo-product-bundle-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bopo – WooCommerce Product Bundle Builder: from n/a through 1.2.3...
CVE-2026-110377
The VillaTheme Bopo – WooCommerce Product Bundle Builder plugin (bopo-woo-product-bundle-builder) is vulnerable to a Missing Authorization vulnerability affecting versions n/a through 1.2.3 . This flaw allows for the exploitation of Incorrectly Configured Access Control Security Levels . The vuln...
WordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.2.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Mash in WordPress Plugin Bopo – WooCommerce Product Bundle Builder versions = 1.2.3...
CVE-2026-115958 WordPress WP Discussion Board plugin <= 2.6.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP Discussion Board WP Discussion Board wp-discussion-board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Discussion Board: from n/a through 2.6.0...
CVE-2026-115958
The WP Discussion Board WordPress plugin (versions
ASUS-SmartHome-Exploit
ASUS-SmartHome-Exploit CVE IDs CVE-2019-11061 : Broken access control in HG100 Affected products : ASUS SmartHome Gateway HG100 Firmware version Affected products : ASUS SmartHome Android APP version 3.0.45190701 Description If the attacker is on the same internal network as the HG100 or a mobile...
WordPress WP Discussion Board plugin <= 2.6.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin WP Discussion Board versions = 2.6.0...
brokeCLAUDIA
🔓 brokeCLAUDIA - CVE-2025-41090 CVE-2025-41090 - Broken access control vulnerability in microCLAUDIA 📑 Table of Contents What is microCLAUDIA? Vulnerability CVE-2025-41090 📂 Public Disclosure CWE Broken Access Control Remediation Presentation Exploit 📂 Overview Requirements Installation Usage Not...
CVE-2025-22828
CVE-2025-22828 📜 Description Apache CloudStack 4.16.0 and later versions have a broken access control issue that allows users with knowledge of resource UUIDs to read or add comments annotations on resources they are not authorized to access. UUIDs can be exposed in various parts of the...
CVE-2026-110376
The VillaTheme DEPART (depart-deposit-and-part-payment-for-woo) WordPress plugin, versions up to and including 1.0.10 , is susceptible to a Missing Authorization (CWE-862) vulnerability. This issue allows for the exploitation of Incorrectly Configured Access Control Security Levels , leading to b...
CVE-2026-110376 WordPress DEPART plugin <= 1.0.10 - Broken Access Control vulnerability
Missing Authorization vulnerability in VillaTheme DEPART depart-deposit-and-part-payment-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DEPART: from n/a through 1.0.10...
WordPress DEPART plugin <= 1.0.10 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by cazy in WordPress Plugin DEPART versions = 1.0.10...
CVE-2026-112828 WordPress AI Engine plugin <= 3.8.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in Meow Apps AI Engine ai-engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engine: from n/a through 3.8.6...