EUVD-2026-94950

Missing Authorization vulnerability in VillaTheme VillaTheme Core villatheme-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VillaTheme Core: from n/a through 1.0.5...

CVE-2026-103072 WordPress VillaTheme Core plugin <= 1.0.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in VillaTheme VillaTheme Core villatheme-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VillaTheme Core: from n/a through 1.0.5...

WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by dzeusking in WordPress Plugin Event Tickets versions = 5.30.0.1...

CVE-2026-105888 WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...

CVE-2026-105888

The Liquid Web / StellarWP Event Tickets WordPress plugin (versions

WordPress VillaTheme Core plugin <= 1.0.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Erik Debye in WordPress Plugin VillaTheme Core versions = 1.0.5...

CVE-2026-105888 WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...

EUVD-2026-94948

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0.1...

WordPress Event Tickets plugin <= 5.30.0.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Erik Debye in WordPress Plugin Event Tickets versions = 5.30.0.1...

CVE-2026-106596 WordPress Visual Composer Website Builder plugin <= 45.16.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Visual Composer Website Builder: from n/a through 45.16.3...

EUVD-2026-94946

Missing Authorization vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Visual Composer Website Builder: from n/a through 45.16.3...

CVE-2026-106596

The Visual Composer Website Builder WordPress plugin (versions

CVE-2026-106596 WordPress Visual Composer Website Builder plugin <= 45.16.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Visual Composer Website Builder: from n/a through 45.16.3...

WordPress Visual Composer Website Builder plugin <= 45.16.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Aarush Gaur in WordPress Plugin Visual Composer Website Builder versions = 45.16.3...

CVE-2026-105886 WordPress Ultimate Post Kit plugin <= 4.5.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in BdThemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Post Kit: from n/a through 4.5.5...

CVE-2026-105886

The BdThemes Ultimate Post Kit WordPress plugin (versions up to and including 4.5.5 ) is vulnerable to a Missing Authorization vulnerability (CWE-862). This flaw allows for the exploitation of incorrectly configured access control security levels . The vulnerability results in a medium severity r...

EUVD-2026-94943

Missing Authorization vulnerability in BdThemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Post Kit: from n/a through 4.5.5...

CVE-2026-105886 WordPress Ultimate Post Kit plugin <= 4.5.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in BdThemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Post Kit: from n/a through 4.5.5...

WordPress Ultimate Post Kit plugin <= 4.5.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Intrudify in WordPress Plugin Ultimate Post Kit versions = 4.5.5...

Improper Control Of Generation Of Code

org.apache.syncope.core, syncope-core-spring is vulnerable to Improper Control of Generation of Code. The vulnerability is due to insufficient validation of administrator-provided Groovy Command classes in the CommandArgs static implementation, which allows an attacker with sufficient...