CVE-2026-27422

The CVE-2026-27422 entry concerns the WordPress YT Player plugin (versions

EUVD-2026-48160

Unauthenticated Broken Access Control in YT Player = 2.0.9 versions...

CVE-2026-27418

The CVE-2026-27418 entry concerns the WordPress plugin WP Fast Total Search

EUVD-2026-48159

Unauthenticated Broken Access Control in WP Fast Total Search = 1.81.282 versions...

EUVD-2026-48157

Unauthenticated Broken Access Control in MarketKing = 2.1.40 versions...

CVE-2026-27399

CVE-2026-27399 concerns the WordPress MarketKing plugin, versions ≤ 2.1.40. The connected documents describe an Unauthenticated Broken Access Control vulnerability in MarketKing, meaning an unauthenticated attacker can bypass access controls. The exact impact details (which data or actions are ex...

EUVD-2026-48155

Subscriber Broken Access Control in uListing = 2.2.0 versions...

EUVD-2026-48156

Contributor Broken Access Control in uListing = 2.2.0 versions...

CVE-2026-27391

Technical details about CVE-2026-27391 are not publicly available in the provided documents. Monitoring for updates is advised.

CVE-2026-27392

CVE-2026-27392 affects the WordPress uListing plugin

CVE-2026-27377

CVE-2026-27377 affects the WordPress plugin QuickCal – Appointment Booking Calendar for WordPress (versions

EUVD-2026-48154

Booking Agent Broken Access Control in QuickCal - Appointment Booking Calendar for WordPress = 1.0.16 versions...

EUVD-2026-48152

Unauthenticated Broken Access Control in Ditty = 3.1.66 versions...

CVE-2026-27355

CVE-2026-27355 affects WordPress Ditty plugin versions

EUVD-2026-48150

Unauthenticated Broken Access Control in WP Go Maps = 10.1.04 versions...

CVE-2026-25427

CVE-2026-25427 affects the WordPress plugin eRoom (versions ≤ 1.7.1). The description identifies a Broken Access Control issue for subscribers, but the available documents do not provide technical details, affected files, root cause, exploitability, or remediation steps. No exploitation informati...

EUVD-2026-48149

Subscriber Broken Access Control in eRoom = 1.7.1 versions...

EUVD-2026-48148

Contributor Broken Access Control in Mediavine Control Panel = 2.10.10 versions...

CVE-2026-25424

CVE-2026-25424 concerns the WordPress Mediavine Control Panel plugin, affected in versions

WordPress Post My CF7 Form plugin <= 6.2.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mitchell in WordPress Plugin Post My CF7 Form versions = 6.2.0...