CVE-2026-109684

The TMS Amelia (ameliabooking) WordPress plugin, versions up to and including 2.4.10 , is vulnerable to a Broken Access Control issue (CWE-862 ). This Missing Authorization vulnerability occurs due to incorrectly configured access control security levels, which could allow an attacker to exploit ...

CVE-2026-109684 WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10...

EUVD-2026-98354

Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10...

CVE-2026-109684 WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10...

WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Parlix in WordPress Plugin Amelia versions = 2.4.10...

CVE-2026-108496 WordPress WP User Manager plugin <= 2.9.24 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Manager: from n/a through 2.9.24...

EUVD-2026-98353

Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Manager: from n/a through 2.9.23...

CVE-2026-108496 WordPress WP User Manager plugin <= 2.9.24 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Manager: from n/a through 2.9.24...

CVE-2026-108496

The WP User Manager WordPress plugin (versions up to and including 2.9.23 ) is vulnerable to a Missing Authorization issue (CWE-862). The flaw allows for the exploitation of Incorrectly Configured Access Control Security Levels , potentially enabling unauthorized actions within the plugin. No spe...

CVE-2026-108493 WordPress Pay for Payment for WooCommerce plugin <= 3.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Karolína Vyskočilová Pay for Payment for WooCommerce woocommerce-pay-for-payment allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pay for Payment for WooCommerce: from n/a through 3.0.1...

CVE-2026-108493 WordPress Pay for Payment for WooCommerce plugin <= 3.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Karolína Vyskočilová Pay for Payment for WooCommerce woocommerce-pay-for-payment allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pay for Payment for WooCommerce: from n/a through 3.0.1...

CVE-2026-108493

The Pay for Payment for WooCommerce plugin (specifically the woocommerce-pay-for-payment component) is vulnerable to a Missing Authorization flaw (CWE-862) in versions up to and including 3.0.1 . This vulnerability allows for Exploiting Incorrectly Configured Access Control Security Levels , pote...

WordPress WP User Manager plugin <= 2.9.23 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Truebird in WordPress Plugin WP User Manager versions = 2.9.23...

WordPress Pay for Payment for WooCommerce plugin <= 3.0.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by myhappyhoon in WordPress Plugin Pay for Payment for WooCommerce versions = 3.0.1...

CVE-2026-108492 WordPress Quick Paypal Payments plugin <= 6.0.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Fullworks Plugins Quick Paypal Payments quick-paypal-payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Paypal Payments: from n/a through 6.0.3...

CVE-2026-108492

The Quick Paypal Payments plugin for WordPress (versions n/a through 6.0.3 ) is vulnerable to a Broken Access Control issue (CWE-862). The vulnerability stems from Missing Authorization , specifically allowing for the exploitation of incorrectly configured access control security levels within th...

EUVD-2026-98349

Missing Authorization vulnerability in Fullworks Plugins Quick Paypal Payments quick-paypal-payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Paypal Payments: from n/a through 6.0.3...

CVE-2026-108492 WordPress Quick Paypal Payments plugin <= 6.0.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Fullworks Plugins Quick Paypal Payments quick-paypal-payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Paypal Payments: from n/a through 6.0.3...

WordPress Quick Paypal Payments plugin <= 6.0.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Oly Hossen in WordPress Plugin Quick Paypal Payments versions = 6.0.3...

BIT-ELASTICSEARCH-2026-103007 Incorrect Authorization in Elasticsearch Leading to Privilege Escalation

Incorrect Authorization CWE-863 in Elasticsearch can lead to Privilege Escalation via a delegated administrative privilege whose scope is not fully enforced during authorization checks. Elasticsearch contains an incorrect authorization weakness in a configurable, non-default privilege that lets a...