19775 matches found
CVE-2026-94080 WordPress MarketKing plugin <= 2.1.70 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in MarketKing = 2.1.70 versions...
CVE-2026-94079
The WP User Manager plugin for WordPress, affecting versions
CVE-2026-94079 WordPress WP User Manager plugin <= 2.9.19 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP User Manager = 2.9.19 versions...
EUVD-2026-85469
Unauthenticated Broken Access Control in WP User Manager = 2.9.19 versions...
CVE-2026-94079 WordPress WP User Manager plugin <= 2.9.19 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP User Manager = 2.9.19 versions...
CVE-2026-93620 WordPress PayPlus Payment Gateway plugin <= 8.2.5 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in PayPlus Payment Gateway = 8.2.5 versions...
CVE-2026-93620
The PayPlus Payment Gateway WordPress plugin, in versions
EUVD-2026-85463
Unauthenticated Broken Access Control in PayPlus Payment Gateway = 8.2.5 versions...
CVE-2026-93620 WordPress PayPlus Payment Gateway plugin <= 8.2.5 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in PayPlus Payment Gateway = 8.2.5 versions...
CVE-2026-93529 WordPress WSP MCP - AI Agents Connector plugin <= 2.7.0 - Broken Access Control vulnerability
Contributor Broken Access Control in WSP MCP AI Agents Connector = 2.7.0 versions...
CVE-2026-93529
The WSP MCP – AI Agents Connector plugin for WordPress versions ≤ 2.7.0 is affected by a Broken Access Control vulnerability. The vulnerability specifically affects contributors , which may allow for unauthorized actions or data modification due to improper permission enforcement. No specific roo...
EUVD-2026-85461
Contributor Broken Access Control in WSP MCP AI Agents Connector = 2.7.0 versions...
CVE-2026-93529 WordPress WSP MCP - AI Agents Connector plugin <= 2.7.0 - Broken Access Control vulnerability
Contributor Broken Access Control in WSP MCP AI Agents Connector = 2.7.0 versions...
CVE-2026-86678 Broken Authentication vulnerability
ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to obtain an administrator’s API key and use it to perform administrator-level actions...
CVE-2026-86678 Broken Authentication vulnerability
ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to obtain an administrator’s API key and use it to perform administrator-level actions...
CVE-2026-86677 Broken Authentication vulnerability
ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to run unauthorized SQL commands, potentially gaining administrator access and remote code execution...
CVE-2026-86677 Broken Authentication vulnerability
ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to run unauthorized SQL commands, potentially gaining administrator access and remote code execution...
CVE-2026-86679 Broken Access Control vulnerability
ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to delete service monitors outside their assigned scope...
CVE-2026-86679 Broken Access Control vulnerability
ZohoCorp ManageEngine Applications Manager versions 182000 and below were vulnerable to a permissions validation issue that allowed a low-privileged user to delete service monitors outside their assigned scope...