CVE-2026-115599

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.11...

CVE-2026-114193

Missing Authorization vulnerability in Eyal Fitoussi GEO my WordPress geo-my-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GEO my WordPress: from n/a through 4.5.5.5...

CVE-2026-112827

Missing Authorization vulnerability in VillaTheme HANDMADE – Dropshipping for Etsy and WooCommerce handmade-dropshipping-for-etsy-and-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HANDMADE – Dropshipping for Etsy and WooCommerce: from n/a through...

CVE-2023-23752

CVE-2023-23752 Description This repository contains Python and Bash scripts that serve as ports of the original Proof of Concept PoC written in Ruby for the vulnerability CVE-2023-23752 in Joomla! CMS versions 4.0.0 through 4.2.7 made by 'noraj' Alexandre ZANNI. An access control flaw was...

Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Node.js

Summary IBM App Connect Enterprise runtime is vulnerable to multiple vulnerabilities due to Node.js Vulnerability Details CVEID:CVE-2026-105482 DESCRIPTION: A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by the dns.resolve functions and dns.revers...

CVE-2024-48955_Overview

CVE-2024-48955Overview Description: Netadmin 4 IAM with access control flaws. Affected version: V4.030319 NetAdmin system returns data with functionalities in the endpoint that "builds" the functionality menus; the response of this call is not encrypted, and as the system does not validate sessio...

EUVD-2026-112733

Missing Authorization vulnerability in VillaTheme HANDMADE – Dropshipping for Etsy and WooCommerce handmade-dropshipping-for-etsy-and-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HANDMADE – Dropshipping for Etsy and WooCommerce: from n/a through...

CVE-2026-115599

The ThimPress LearnPress plugin for WordPress is vulnerable to a Missing Authorization (CWE-862) flaw in versions up to and including 4.4.11 . This issue allows for the exploitation of incorrectly configured access control security levels . The vulnerability results in a High severity impact (CVS...

EUVD-2026-112732

Missing Authorization vulnerability in Eyal Fitoussi GEO my WordPress geo-my-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GEO my WordPress: from n/a through 4.5.5.5...

EUVD-2026-112731

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.11...

CVE-2026-112827

The VillaTheme HANDMADE – Dropshipping for Etsy and WooCommerce plugin (specifically handmade-dropshipping-for-etsy-and-woo) is vulnerable to a Missing Authorization issue. This flaw allows for the exploitation of incorrectly configured access control security levels. The vulnerability affects ve...

CVE-2026-114193

The GEO my WordPress (geo-my-wp) plugin, developed by Eyal Fitoussi, is vulnerable to a Missing Authorization flaw (CWE-862) in versions up to 4.5.5.5 . This vulnerability allows for the exploitation of incorrectly configured access control security levels . According to the provided metrics, the...

CVE-2026-115599 WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.11...

CVE-2026-112827 WordPress HANDMADE – Dropshipping for Etsy and WooCommerce plugin <= 1.0.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in VillaTheme HANDMADE – Dropshipping for Etsy and WooCommerce handmade-dropshipping-for-etsy-and-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HANDMADE – Dropshipping for Etsy and WooCommerce: from n/a through...

CVE-2026-114193 WordPress GEO my WordPress plugin <= 4.5.5.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Eyal Fitoussi GEO my WordPress geo-my-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GEO my WordPress: from n/a through 4.5.5.5...

CVE-2026-115963

The VideoWhisper.com Broadcast Live Video (videowhisper-live-streaming-integration) WordPress plugin is affected by a Missing Authorization vulnerability (CWE-862). This flaw allows for Exploiting Incorrectly Configured Access Control Security Levels in versions from n/a through 7.3.9 . The vulne...

EUVD-2026-112728

Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadcast Live Video: from n/a through 7.3.9...

CVE-2026-115963 WordPress Broadcast Live Video plugin <= 7.3.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadcast Live Video: from n/a through 7.3.9...

CVE-2022-39838

CVE-2022-39838 Suggested description Systematica FIX Adapter ALFAFX 2.4.0.25 13/09/2017 allows remote file inclusion via a UNC share pathname, and also allows absolute path traversal to local pathnames. Additional Information PoC:...

CVE-2024-39210

CVE ID CVE-2024-39210 PRODUCT Best house rental management system VERSION =1.0 PROBLEM TYPE Incorrect Access Control Description Best House Rental Management System v1.0 was discovered to contain an arbitrary file read vulnerability via the Page parameter at index.php. This vulnerability allows...