CVE-2026-112312 WordPress ACF Extended plugin <= 0.9.2.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in ACF Extended ACF Extended acf-extended allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ACF Extended: from n/a through 0.9.2.7...

EUVD-2026-108070

Missing Authorization vulnerability in ACF Extended ACF Extended acf-extended allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ACF Extended: from n/a through 0.9.2.7...

CVE-2026-112312

The ACF Extended WordPress plugin (versions

CVE-2026-36425

CVE-2026-36425 : OPSWAT AppRemover Arbitrary Process Termination A signed OPSWAT kernel driver that kills any process on demand. No admin rights needed, no privilege checks, no questions asked. Point it at an EDR, an antivirus, a PPL-protected process and it dies. Three different kill methods, al...

CVE-2026-110893 WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureDash: from n/a through 1.12.2...

CVE-2026-110893

The WordPress SureDash plugin (versions up to and including 1.12.2 ) is susceptible to a Broken Access Control vulnerability (CWE-862). The root cause is a Missing Authorization issue where incorrectly configured security levels allow for the exploitation of access controls. This vulnerability im...

WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by yzx001 in WordPress Plugin SureDash versions = 1.12.2...

eWeLink-QR-Code

eWeLink mobile Application - Incorrect Access Control Vulnerability CVE-2021-27941 Unconstrained Web access to the device's private encryption key in the QR code pairing mode in the eWeLink mobile application through 4.9.2 on Android and through 4.9.1 on iOS allows a physically proximate attacker...

CVE-2026-110894 WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureDash: from n/a through 1.12.2...

CVE-2026-110894

The WordPress SureDash plugin (versions

WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by yzx001 in WordPress Plugin SureDash versions = 1.12.2...

EUVD-2026-108055

Authorization Bypass Through User-Controlled Key vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.0-beta.1...

CVE-2026-76071

CVE-2026-76071: Unauthenticated Pre-Auth Stack Buffer Overflow via sscanf %^, in skkset.cgi ipFilterList Handler in Netis NC63 Researcher: Özcan Ersan @ozcanpng Disclosure status CVE: CVE-2026-76071 Vendor: Netis Systems Co., Ltd. Product: Netis NC63 AC1200 Wireless Dual Band Gigabit MU-MIMO Rout...

CVE-2026-56423-MISP-deleteSelection-BrokenAccessControl

CVE-2026-56423 — MISP deleteSelection Broken Access Control Proof of concept for a missing-authorization flaw in MISP's bulk deletion flows for Event Reports and Sharing Groups. The deleteSelection handlers authorize each selected item with a callback that ignores the item and returns the caller'...

CVE-2026-114182

Missing Authorization vulnerability in IdeaBox Creations PowerPack Addons for Elementor powerpack-lite-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PowerPack Addons for Elementor: from n/a through 3.1.0...

CVE-2026-114180

Missing Authorization vulnerability in Wpmet Metform metform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Metform: from n/a through 4.3.2...

CVE-2026-112826

Missing Authorization vulnerability in eLightUp Falcon – WordPress Optimizations & Tweaks falcon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Falcon – WordPress Optimizations & Tweaks: from n/a through 2.12.0...

CVE-2026-112843

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.14...

CVE-2026-114175

Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eRoom: from n/a through 1.7.1...

CVE-2026-111847

Missing Authorization vulnerability in Kings Plugins MarketKing marketking-multivendor-marketplace-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MarketKing: from n/a through 2.1.72...