CVE-2026-62035

The AWS S3 for WordPress Plugin (specifically the Upcasted version) is vulnerable to a Broken Access Control issue in versions

EUVD-2026-96470

Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted = 3.1.0 versions...

CVE-2026-62035 WordPress AWS S3 for WordPress Plugin – Upcasted plugin <= 3.1.0 - Broken Access Control vulnerability

Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted = 3.1.0 versions...

CVE-2026-42706 WordPress DK theme <= 3.2.1 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in DK = 3.2.1 versions...

EUVD-2026-96443

Unauthenticated Broken Access Control in DK = 3.2.1 versions...

CVE-2026-42706 WordPress DK theme <= 3.2.1 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in DK = 3.2.1 versions...

CVE-2026-42706

The WordPress DK theme (versions

CVE-2026-42705 WordPress Grand News theme <= 3.4 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Grand News = 3.4 versions...

EUVD-2026-96442

Unauthenticated Broken Access Control in Grand News = 3.4 versions...

CVE-2026-42705 WordPress Grand News theme <= 3.4 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Grand News = 3.4 versions...

CVE-2026-42705

The WordPress Grand News theme (versions

CVE-2026-40808

The Jetpack VideoPress WordPress plugin (versions

CVE-2026-40808 WordPress Jetpack VideoPress plugin <= 3.6 - Broken Access Control vulnerability

Subscriber Broken Access Control in Jetpack VideoPress = 3.6 versions...

EUVD-2026-96542

Subscriber Broken Access Control in Jetpack VideoPress = 3.6 versions...

CVE-2026-40808 WordPress Jetpack VideoPress plugin <= 3.6 - Broken Access Control vulnerability

Subscriber Broken Access Control in Jetpack VideoPress = 3.6 versions...

CVE-2026-40801 WordPress Wordable plugin <= 8.2.10 - Broken Access Control vulnerability

Subscriber Broken Access Control in Wordable = 8.2.10 versions...

EUVD-2026-96538

Subscriber Broken Access Control in Wordable = 8.2.10 versions...

CVE-2026-40801 WordPress Wordable plugin <= 8.2.10 - Broken Access Control vulnerability

Subscriber Broken Access Control in Wordable = 8.2.10 versions...

CVE-2026-40801

The Wordable WordPress plugin, versions

CVE-2026-40777 WordPress WPSection plugin <= 1.5.1 - Broken Access Control vulnerability

Subscriber Broken Access Control in WPSection = 1.5.1 versions...