276818 matches found
CVE-2026-106596
The Visual Composer Website Builder WordPress plugin (versions
CVE-2026-106596 WordPress Visual Composer Website Builder plugin <= 45.16.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Visual Composer Website Builder: from n/a through 45.16.3...
WordPress Visual Composer Website Builder plugin <= 45.16.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Aarush Gaur in WordPress Plugin Visual Composer Website Builder versions = 45.16.3...
CVE-2026-105886 WordPress Ultimate Post Kit plugin <= 4.5.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in BdThemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Post Kit: from n/a through 4.5.5...
CVE-2026-105886
The BdThemes Ultimate Post Kit WordPress plugin (versions up to and including 4.5.5 ) is vulnerable to a Missing Authorization vulnerability (CWE-862). This flaw allows for the exploitation of incorrectly configured access control security levels . The vulnerability results in a medium severity r...
CVE-2026-105886 WordPress Ultimate Post Kit plugin <= 4.5.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in BdThemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Post Kit: from n/a through 4.5.5...
EUVD-2026-94943
Missing Authorization vulnerability in BdThemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Post Kit: from n/a through 4.5.5...
WordPress Ultimate Post Kit plugin <= 4.5.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Intrudify in WordPress Plugin Ultimate Post Kit versions = 4.5.5...
Improper Control Of Generation Of Code
org.apache.syncope.core, syncope-core-spring is vulnerable to Improper Control of Generation of Code. The vulnerability is due to insufficient validation of administrator-provided Groovy Command classes in the CommandArgs static implementation, which allows an attacker with sufficient...
EUVD-2026-94931
Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Product Bundles: from n/a through 2.29.0...
CVE-2026-105878 WordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Product Bundles: from n/a through 2.29.0...
CVE-2026-105878
The YITH WooCommerce Product Bundles WordPress plugin (versions
CVE-2026-105878 WordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Product Bundles: from n/a through 2.29.0...
WordPress YITH WooCommerce Product Bundles plugin <= 2.29.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by sungbyeongchan in WordPress Plugin YITH WooCommerce Product Bundles versions = 2.29.0...
EUVD-2026-94930
Authorization Bypass Through User-Controlled Key vulnerability in Groundhogg HollerBox holler-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HollerBox: from n/a through 2.3.14...
CVE-2026-106600 WordPress GiveWP plugin <= 4.18.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GiveWP: from n/a through 4.18.0...
CVE-2026-106600 WordPress GiveWP plugin <= 4.18.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GiveWP: from n/a through 4.18.0...
CVE-2026-106600
The GiveWP WordPress plugin (versions 4.18.0 and below ) is susceptible to a Broken Access Control vulnerability (CWE-862). The root cause is Missing Authorization , which allows for the exploitation of incorrectly configured access control security levels. While the specific technical impact of ...
EUVD-2026-94928
Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GiveWP: from n/a through 4.18.0...