3651 matches found
CVE-2026-22450 WordPress Don Peppe theme <= 1.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in Select-Themes Don Peppe donpeppe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Don Peppe: from n/a through = 1.3...
CVE-2025-69300
Missing Authorization vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premium Addons for Elementor: from n/a through = 4.11.63...
CVE-2025-69186 WordPress Hospital Doctor Directory plugin <= 1.3.9 - Broken Access Control vulnerability
Missing Authorization vulnerability in e-plugins Hospital Doctor Directory hospital-doctor-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hospital Doctor Directory: from n/a through = 1.3.9...
CVE-2025-69181 WordPress Lawyer Directory plugin <= 1.3.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in e-plugins Lawyer Directory lawyer-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lawyer Directory: from n/a through = 1.3.4...
CVE-2025-69095 WordPress Reservation Plugin plugin <= 1.7 - Settings Change vulnerability
Missing Authorization vulnerability in designthemes Reservation Plugin dt-reservation-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Reservation Plugin: from n/a through = 1.7...
CVE-2025-67957
CVE-2025-67957 is a WordPress vulnerability in the Listivo Core plugin (
Microsoft Azure Resource Manager Access Control Vulnerability
Microsoft Azure Resource Manager is a deployment and management service provided by Microsoft Corporation in the United States. Microsoft Azure Resource Manager has a access control vulnerability, which stems from improper access control practices. Attackers can exploit this vulnerability to gain...
Horilla Access Control Vulnerability
Horilla is a free open-source human resources software developed by Horilla Company. Versions of Horilla 1.4.0 and later contain an access control vulnerability. This vulnerability stems from the unauthorized access to unpublished recruitment information, which may lead to the leakage of sensitiv...
Microsoft Azure Front Door Access Control Vulnerability
Microsoft Azure Front Door is a cloud content distribution network provided by the American company Microsoft. There is an access control vulnerability in Microsoft Azure Front Door, which stems from improper access control practices. Attackers can exploit this vulnerability to gain higher...
Horilla Access Control Vulnerability
Horilla is a free open-source human resources software developed by Horilla Company. Versions of Horilla from 1.4.0 to 1.5.0 contained an access control vulnerability. This vulnerability stemmed from insufficient validation of the employeeid parameter on the server side, allowing any authenticate...
WordPress plugin Justicia has a security vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
EUVD-2026-3349
Fleet is open source device management software. A broken access control issue in versions prior to 4.78.3, 4.77.1, 4.76.2, 4.75.2, and 4.53.3 allowed authenticated users to access debug and profiling endpoints regardless of role. As a result, low-privilege users could view internal server...
WordPress TaxCloud for WooCommerce plugin <= 8.3.8 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin TaxCloud for WooCommerce versions = 8.3.8...
Keycloak Access Control Vulnerability
Keycloak is an open-source identity and access management solution developed by Keycloak. Keycloak has a vulnerability related to access control, which can expose the backend architecture and rules. This vulnerability may lead to improper access control, potentially allowing targeted attacks or...
ROS-20260120-7305
A vulnerability in the tcp component of the Linux operating system kernel is related to pointer dereferencing errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
Huawei HarmonyOS Memo Module Privilege Control Vulnerability (CNVD-2026-13996)
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A privilege control vulnerability exists in the Huawei HarmonyOS memo module, which can be exploited by an attacker to compromise confidentiality...
Security Bulletin: Remediation of Multiple Apache Struts 1.3.10 Vulnerabilities in IBM Library Support for Struts
Summary Multiple EOL Apache Struts 1.3.10 Vulnerabilities have been addressed in IBM Library Support for Struts Vulnerability Details CVEID:CVE-2025-54656 DESCRIPTION: UNSUPPORTED WHEN ASSIGNED Improper Output Neutralization for Logs vulnerability in Apache Struts. This issue affects Apache Strut...
CVE-2026-22640
CVE-2026-22640 describes an access control vulnerability in Grafana OSS where an Organization administrator can permanently delete the Server administrator account via the DELETE /api/org/users/ endpoint. The attack requires an existing Organization administrator and either a Server administrator...
