CVE-2026-115598

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.11...

CVE-2026-115598

The ThimPress LearnPress WordPress plugin (versions up to and including 4.4.11 ) is vulnerable to a Missing Authorization issue (CWE-862). This flaw allows attackers to exploit Incorrectly Configured Access Control Security Levels . The vulnerability carries a CVSS 3.1 base score of 5.3 (Medium) ...

CVE-2026-115598 WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.11...

CVE-2026-115598 WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.11...

EUVD-2026-109994

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.11...

WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by ssophiz in WordPress Plugin LearnPress versions = 4.4.11...

EUVD-2026-109991

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.11...

CVE-2026-115597 WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.11...

CVE-2026-115597

The ThimPress LearnPress plugin for WordPress (versions up to and including 4.4.11 ) is vulnerable to a Missing Authorization flaw (CWE-862). This issue allows for the exploitation of incorrectly configured access control security levels . The vulnerability has a CVSS 3.1 base score of 5.4 (Mediu...

CVE-2026-115597 WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.11...

WordPress LearnPress plugin <= 4.4.11 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Harry Nguyen in WordPress Plugin LearnPress versions = 4.4.11...

CVE-2026-116388

The Amelia (TMS ameliabooking) plugin for WordPress, versions up to and including 2.4.10 , is susceptible to a Missing Authorization vulnerability (CWE-862). The root cause is incorrectly configured access control security levels , which may allow for unauthorized access to specific functionaliti...

CVE-2026-116388 WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10...

CVE-2026-116388 WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10...

EUVD-2026-109990

Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10...

WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by yzx001 in WordPress Plugin Amelia versions = 2.4.10...

Malware in @drone-js-ext/vip-badge

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @ppa-web-components/ppa-banner

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @greenlake/mfe-login-url

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @ppa-web-components/ppa-navigation

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...