276194 matches found
CVE-2026-103356
The VillaTheme TMDS (tmds-dropshipping-for-temu-and-woo) WordPress plugin is vulnerable to a Missing Authorization vulnerability in versions up to and including 1.0.15 . This issue stems from incorrectly configured access control security levels , allowing for broken access control. While the spe...
CVE-2026-103356 WordPress TMDS plugin <= 1.0.15 - Broken Access Control vulnerability
Missing Authorization vulnerability in VillaTheme TMDS tmds-dropshipping-for-temu-and-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TMDS: from n/a through 1.0.15...
EUVD-2026-97291
Missing Authorization vulnerability in VillaTheme TMDS tmds-dropshipping-for-temu-and-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TMDS: from n/a through 1.0.15...
CVE-2026-103356 WordPress TMDS plugin <= 1.0.15 - Broken Access Control vulnerability
Missing Authorization vulnerability in VillaTheme TMDS tmds-dropshipping-for-temu-and-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TMDS: from n/a through 1.0.15...
CVE-2026-107430
The VideoWhisper Site Manager for ChatGPT, Claude, Codex WordPress plugin is vulnerable to Broken Access Control (CWE-862) due to incorrectly configured access control security levels . This missing authorization vulnerability affects versions up to and including 1.2.10 . The impact allows for th...
CVE-2026-107430 WordPress VideoWhisper Site Manager for ChatGPT, Claude, Codex plugin <= 1.2.10 - Broken Access Control vulnerability
Missing Authorization vulnerability in VideoWhisper.com VideoWhisper Site Manager for ChatGPT, Claude, Codex videowhisper-site-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VideoWhisper Site Manager for ChatGPT, Claude, Codex: from n/a through...
EUVD-2026-97290
Missing Authorization vulnerability in VideoWhisper.com VideoWhisper Site Manager for ChatGPT, Claude, Codex videowhisper-site-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VideoWhisper Site Manager for ChatGPT, Claude, Codex: from n/a through...
CVE-2026-107430 WordPress VideoWhisper Site Manager for ChatGPT, Claude, Codex plugin <= 1.2.10 - Broken Access Control vulnerability
Missing Authorization vulnerability in VideoWhisper.com VideoWhisper Site Manager for ChatGPT, Claude, Codex videowhisper-site-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VideoWhisper Site Manager for ChatGPT, Claude, Codex: from n/a through...
WordPress TMDS plugin <= 1.0.15 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Aarush Gaur in WordPress Plugin TMDS versions = 1.0.15...
WordPress VideoWhisper Site Manager for ChatGPT, Claude, Codex plugin <= 1.2.10 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Erik Debye in WordPress Plugin VideoWhisper Site Manager for ChatGPT, Claude, Codex versions = 1.2.10...
CVE-2026-107427
The WordPress Event post plugin, affecting versions
CVE-2026-107427 WordPress Event post plugin <= 6.1.1 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in NOUS Ouvert Utile et Simple Event post event-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event post: from n/a through 6.1.1...
EUVD-2026-97287
Authorization Bypass Through User-Controlled Key vulnerability in NOUS Ouvert Utile et Simple Event post event-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event post: from n/a through 6.1.1...
CVE-2026-107427 WordPress Event post plugin <= 6.1.1 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in NOUS Ouvert Utile et Simple Event post event-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event post: from n/a through 6.1.1...
CVE-2026-21135
Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information...
CVE-2026-21139
Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile device...
CVE-2026-21118
Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage...
CVE-2026-21139
Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile device...
CVE-2026-21139
The Samsung Continuity Service for Windows is vulnerable to improper access control in versions prior to 4.6.1217.0 . This security flaw allows an adjacent attacker to manipulate a connected mobile device. No specific root cause, exploit details, or remediation steps are provided in the documents...