277939 matches found
CVE-2026-107418
The Booktics WordPress plugin (versions ≤ 1.0.28 ) is vulnerable to a Broken Access Control issue. This vulnerability stems from Missing Authorization , which allows attackers to exploit Incorrectly Configured Access Control Security Levels . The impact involves unauthorized access to functionali...
CVE-2026-107418 WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability
Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.28...
EUVD-2026-97721
Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.28...
WordPress Forminator plugin <= 1.58.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Andrei in WordPress Plugin Forminator versions = 1.58.0...
WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by dzeusking in WordPress Plugin Booktics versions = 1.0.28...
EUVD-2026-97577
Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadcast Live Video: from n/a through 7.3.6...
CVE-2026-108475 WordPress Broadcast Live Video plugin <= 7.3.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadcast Live Video: from n/a through 7.3.6...
CVE-2026-108475 WordPress Broadcast Live Video plugin <= 7.3.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadcast Live Video: from n/a through 7.3.6...
CVE-2026-108475
The VideoWhisper.com Broadcast Live Video WordPress plugin (versions
CVE-2026-108476 WordPress Paid Videochat Turnkey Site plugin <= 7.5.13 - Broken Access Control vulnerability
Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Videochat Turnkey Site: from n/a through 7.5.13...
CVE-2026-108476
The WordPress Paid Videochat Turnkey Site plugin (ppv-live-webcams) versions
CVE-2026-108476 WordPress Paid Videochat Turnkey Site plugin <= 7.5.13 - Broken Access Control vulnerability
Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Videochat Turnkey Site: from n/a through 7.5.13...
EUVD-2026-97576
Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Videochat Turnkey Site: from n/a through 7.5.13...
WordPress Broadcast Live Video plugin <= 7.3.6 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin Broadcast Live Video versions = 7.3.6...
RHLW-2026-99869C1CAD4574FC Lightwell Security Advisory: netty-codec-http 4.1.100.Final-rhlw-00001
Red Hat Lightwell has released io.netty:netty-codec-http 4.1.100.Final-rhlw-00001 with backported fixes for CVE-2024-29025, CVE-2025-58056, CVE-2025-67735, CVE-2026-33870, CVE-2026-41417, CVE-2026-42580, CVE-2026-42581, CVE-2026-42584, CVE-2026-42585, CVE-2026-42587, CVE-2026-50020, CVE-2026-5583...
RHLW-2026-1A7BD97B99988E1C Lightwell Security Advisory: commons-beanutils 1.10.1.rhlw-00001
Red Hat Lightwell has released commons-beanutils:commons-beanutils 1.10.1.rhlw-00001 with a backported security fix. CVE-2025-48734: Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector class was added in version 1.9.2. This can be used to stop attackers from using...
RHLW-2026-89F4DBC7818C5084 Lightwell Security Advisory: commons-beanutils 1.10.0.rhlw-00001
Red Hat Lightwell has released commons-beanutils:commons-beanutils 1.10.0.rhlw-00001 with a backported security fix. CVE-2025-48734: Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector class was added in version 1.9.2. This can be used to stop attackers from using...
xworm-7.4-RCE-PoC
XWorm C2 Controller - 0-Day Remote Code Execution RCE !Au...
WordPress Paid Videochat Turnkey Site plugin <= 7.5.13 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by cazy in WordPress Plugin Paid Videochat Turnkey Site versions = 7.5.13...
CVE-2026-108477
The Booktics WordPress plugin (versions up to and including 1.0.28 ) is vulnerable to a Broken Access Control flaw (CWE-862). The issue stems from incorrectly configured access control security levels , which results in a missing authorization vulnerability. This allows an attacker to exploit the...