EUVD-2026-96542

Subscriber Broken Access Control in Jetpack VideoPress = 3.6 versions...

CVE-2026-40808 WordPress Jetpack VideoPress plugin <= 3.6 - Broken Access Control vulnerability

Subscriber Broken Access Control in Jetpack VideoPress = 3.6 versions...

EUVD-2026-96538

Subscriber Broken Access Control in Wordable = 8.2.10 versions...

CVE-2026-40801

The Wordable WordPress plugin, versions

CVE-2026-40801 WordPress Wordable plugin <= 8.2.10 - Broken Access Control vulnerability

Subscriber Broken Access Control in Wordable = 8.2.10 versions...

EUVD-2026-96536

Subscriber Broken Access Control in WPSection = 1.5.1 versions...

CVE-2026-40777

The WordPress WPSection plugin (versions

CVE-2026-40777 WordPress WPSection plugin <= 1.5.1 - Broken Access Control vulnerability

Subscriber Broken Access Control in WPSection = 1.5.1 versions...

CVE-2026-94590

The CodePeople2 Sell Downloads WordPress plugin, affecting versions up to and including 1.2.3 , contains a Broken Access Control vulnerability. This issue is characterized as an Improper Verification of Source of a Communication Channel , which can lead to the Exploitation of Trusted Credentials ...

CVE-2026-94590 WordPress Sell Downloads plugin <= 1.2.3 - Broken Access Control vulnerability

Improper Verification of Source of a Communication Channel vulnerability in CodePeople2 Sell Downloads sell-downloads allows Exploitation of Trusted Credentials.This issue affects Sell Downloads: from n/a through 1.2.3...

disclosure-thinkware-u3000

Thinkware U3000 Dashcam: Vulnerabilità di Sicurezza Tre vulnerabilità nel protocollo di controllo WiFi locale della dashcam Thinkware U3000, scoperte tramite reverse engineering dell'app Android ufficiale e confermate su hardware reale. Tutte e tre richiedono solo l'accesso alla rete locale: ness...

CVE-2026-106609

Missing Authorization vulnerability in Web Impian Bayarcash WooCommerce bayarcash-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bayarcash WooCommerce: from n/a through 4.4.2...

CVE-2026-103357

Missing Authorization vulnerability in VillaTheme GIFT4U gift4u-gift-cards-all-in-one-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GIFT4U: from n/a through 1.1.3...

EUVD-2026-96376

Missing Authorization vulnerability in Web Impian Bayarcash WooCommerce bayarcash-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bayarcash WooCommerce: from n/a through 4.4.2...

CVE-2026-106609 WordPress Bayarcash WooCommerce plugin <= 4.4.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Web Impian Bayarcash WooCommerce bayarcash-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bayarcash WooCommerce: from n/a through 4.4.2...

CVE-2026-103357 WordPress GIFT4U plugin <= 1.1.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in VillaTheme GIFT4U gift4u-gift-cards-all-in-one-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GIFT4U: from n/a through 1.1.3...

EUVD-2026-96378

Missing Authorization vulnerability in VillaTheme GIFT4U gift4u-gift-cards-all-in-one-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GIFT4U: from n/a through 1.1.3...

CVE-2026-103357

The VillaTheme GIFT4U (gift4u-gift-cards-all-in-one-for-woo) WordPress plugin is susceptible to a Missing Authorization vulnerability in versions through 1.1.3 . This flaw allows for Exploiting Incorrectly Configured Access Control Security Levels , potentially leading to unauthorized actions wit...

CVE-2026-106609

The Bayarcash WooCommerce (bayarcash-wc) WordPress plugin, versions 4.4.2 and below , is vulnerable to a Missing Authorization (CWE-862) security flaw. This issue allows an attacker to exploit incorrectly configured access control security levels . No specific remediation details, exploit links, ...

CVE-2026-98380

A flaw was found in the Linux kernel's traffic control subsystem. A local attacker with network configuration privileges can exploit a race condition during traffic control action deletion to cause a Denial of Service DoS by crashing the system. Due to missing error validation during action...