278137 matches found
EUVD-2026-92486
Plane is an open-source project management tool. Prior to 1.4.0, Plane's project update endpoint authorizes the caller against the workspace slug in the request URL but loads the target project globally by UUID without binding it to that workspace. An administrator of one workspace can modify a...
WordPress Advanced Posts Listing – Show Post List Easily plugin <= 1.0.8 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Mohamed Bassia in WordPress Plugin Advanced Posts Listing – Show Post List Easily versions = 1.0.8...
WordPress 10Web Social Photo Feed plugin <= 1.4.35 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin 10Web Social Photo Feed versions = 1.4.35...
WordPress The7 theme <= 14.2.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Bonds in WordPress Theme The7 versions = 14.2.2...
WordPress Autoship Cloud for WooCommerce Subscription Products plugin <= 2.17.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Averon Averenkov in WordPress Plugin Autoship Cloud for WooCommerce Subscription Products versions = 2.17.1...
WordPress Easy Digital Downloads plugin <= 3.7.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Easy Digital Downloads versions = 3.7.1...
Malware in dzyclutch-libsignal-node
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in yonzoffic-baileys
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in diezyclutch-baileys
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in @diezyclutch/baileys
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
WordPress WXD Backup Lite plugin <= 1.0.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WXD Backup Lite versions = 1.0.2...
WordPress FluentBooking Pro plugin < 2.5.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin FluentBooking Pro versions 2.5.0...
CVE-2026-105421
Missing Authorization vulnerability in Kit Kit formerly ConvertKit for WooCommerce convertkit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kit formerly ConvertKit for WooCommerce: from n/a through 2.2.0...
WordPress WP2LEADS plugin <= 3.5.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by johska in WordPress Plugin WP2LEADS versions = 3.5.7...
WordPress Fluent Affiliate Pro plugin <= 1.6.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Fluent Affiliate Pro versions = 1.6.4...
WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ratchanon Chamnankit in WordPress Plugin WP Event Solution versions = 4.1.25...
Langflow Broken Access Control (CVE-2026-21445)
Exploits CVE-2026-21445 in Langflow 1.7.0.dev45: unauthenticated access to /api/v1/monitor/messages and related monitor endpoints exposes user conversation data and allows destructive operations without authorization. !/usr/bin/env python3 -- coding: utf-8 -- """Langflow broken access control on...
CVE-2026-105421 WordPress Kit (formerly ConvertKit) for WooCommerce plugin <= 2.2.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Kit Kit formerly ConvertKit for WooCommerce convertkit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kit formerly ConvertKit for WooCommerce: from n/a through 2.2.0...
EUVD-2026-92432
Missing Authorization vulnerability in Kit Kit formerly ConvertKit for WooCommerce convertkit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kit formerly ConvertKit for WooCommerce: from n/a through 2.2.0...
