CVE-2026-95526

Unauthenticated Broken Access Control in BEAR = 1.2.2 versions...

CVE-2026-62072

Subscriber Broken Access Control in Progress Planner = 1.10.0 versions...

CVE-2026-66588

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. False-positive...

CVE-2026-42638

Missing Authorization vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Digital Downloads: from n/a through 3.7.1...

CVE-2026-48199

Unauthenticated Broken Access Control in Sermon'e = 1.0.2 versions...

CVE-2026-41560

Unauthenticated Broken Access Control in WXD Backup Lite = 1.0.2 versions...

CVE-2026-39794

Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API = 1.6.3 versions...

CVE-2026-39796

Unauthenticated Broken Access Control in Advanced Posts Listing – Show Post List Easily = 1.0.8 versions...

CVE-2026-39787

Unauthenticated Broken Access Control in 10Web Social Photo Feed = 1.4.35 versions...

CVE-2026-39762

Missing Authorization vulnerability in Patterns In The Cloud Autoship Cloud for WooCommerce Subscription Products autoship-cloud allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Autoship Cloud for WooCommerce Subscription Products: from n/a through 2.17.1...

CVE-2026-39749

Subscriber Broken Access Control in App for Cloudflare® = 1.10.1 versions...

CVE-2026-39751

Unauthenticated Broken Access Control in PayPlug for WooCommerce Official = 3.1.0 versions...

CVE-2026-39730

Missing Authorization vulnerability in Marcin Wise Chat wise-chat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wise Chat: from n/a through 3.4.3...

CVE-2026-32578

Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce = 1.1.2606090 versions...

CVE-2026-25433

Subscriber Broken Access Control in WP2LEADS = 3.5.7 versions...

CVE-2026-105059

Missing Authorization vulnerability in royalnavneet Delete All Comments of wordpress delete-all-comments-of-website allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Delete All Comments of wordpress: from n/a through 7.1...

CVE-2026-104406

Unauthenticated Broken Access Control in picu = 3.10.1 versions...

CVE-2026-104387

Unauthenticated Broken Access Control in PowerPress Podcasting = 11.17.9 versions...

CVE-2026-102915

Subscriber Broken Access Control in WPO365 = 44.1 versions...

CVE-2026-98357

In the Linux kernel, the following vulnerability has been resolved: IB/isert: wait for deferred control PDU completions before releasing the connection isertsenddone hands ISTATESENDTASKMGTRSP, ISTATESENDREJECT and ISTATESENDTEXTRSP completions off to isertcompwq and returns. The work item then...