CVE-2026-42706

The WordPress DK theme (versions

CVE-2026-42706 WordPress DK theme <= 3.2.1 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in DK = 3.2.1 versions...

CVE-2026-42705 WordPress Grand News theme <= 3.4 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Grand News = 3.4 versions...

EUVD-2026-96442

Unauthenticated Broken Access Control in Grand News = 3.4 versions...

CVE-2026-42705

The WordPress Grand News theme (versions

CVE-2026-40808

The Jetpack VideoPress WordPress plugin (versions

EUVD-2026-96542

Subscriber Broken Access Control in Jetpack VideoPress = 3.6 versions...

CVE-2026-40808 WordPress Jetpack VideoPress plugin <= 3.6 - Broken Access Control vulnerability

Subscriber Broken Access Control in Jetpack VideoPress = 3.6 versions...

EUVD-2026-96538

Subscriber Broken Access Control in Wordable = 8.2.10 versions...

CVE-2026-40801

The Wordable WordPress plugin, versions

CVE-2026-40801 WordPress Wordable plugin <= 8.2.10 - Broken Access Control vulnerability

Subscriber Broken Access Control in Wordable = 8.2.10 versions...

EUVD-2026-96536

Subscriber Broken Access Control in WPSection = 1.5.1 versions...

CVE-2026-40777

The WordPress WPSection plugin (versions

CVE-2026-40777 WordPress WPSection plugin <= 1.5.1 - Broken Access Control vulnerability

Subscriber Broken Access Control in WPSection = 1.5.1 versions...

CVE-2026-94590

The CodePeople2 Sell Downloads WordPress plugin, affecting versions up to and including 1.2.3 , contains a Broken Access Control vulnerability. This issue is characterized as an Improper Verification of Source of a Communication Channel , which can lead to the Exploitation of Trusted Credentials ...

CVE-2026-94590 WordPress Sell Downloads plugin <= 1.2.3 - Broken Access Control vulnerability

Improper Verification of Source of a Communication Channel vulnerability in CodePeople2 Sell Downloads sell-downloads allows Exploitation of Trusted Credentials.This issue affects Sell Downloads: from n/a through 1.2.3...

disclosure-thinkware-u3000

Thinkware U3000 Dashcam: Vulnerabilità di Sicurezza Tre vulnerabilità nel protocollo di controllo WiFi locale della dashcam Thinkware U3000, scoperte tramite reverse engineering dell'app Android ufficiale e confermate su hardware reale. Tutte e tre richiedono solo l'accesso alla rete locale: ness...

CVE-2026-106609

Missing Authorization vulnerability in Web Impian Bayarcash WooCommerce bayarcash-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bayarcash WooCommerce: from n/a through 4.4.2...

CVE-2026-103357

Missing Authorization vulnerability in VillaTheme GIFT4U gift4u-gift-cards-all-in-one-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GIFT4U: from n/a through 1.1.3...

EUVD-2026-96376

Missing Authorization vulnerability in Web Impian Bayarcash WooCommerce bayarcash-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bayarcash WooCommerce: from n/a through 4.4.2...