CVE-2026-28181 WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Broken Access Control vulnerability

Subscriber Broken Access Control in AcyMailing SMTP Newsletter = 10.11.1 versions...

EUVD-2026-57960

Subscriber Broken Access Control in AcyMailing SMTP Newsletter = 10.11.1 versions...

CVE-2026-28159

Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...

EUVD-2026-57952

Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...

CVE-2026-28159 WordPress Service Finder Booking plugin <= 6.2 - Broken Access Control vulnerability

Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...

CVE-2026-28159

CVE-2026-28159 affects the WordPress plugin “Service Finder Booking” up to version 6.2. The vulnerability is described as Broken Access Control, with CVSS3.1 base metrics: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (medium). Impact: Unauthorized access could affect availability of the service or booking...

EUVD-2026-57948

Unauthenticated Insecure Direct Object References IDOR in Do Lasso = 358 versions...

CVE-2026-27999

Subscriber Broken Access Control in Tourfic = 2.23.1 versions...

CVE-2026-27999

The CVE-2026-27999 entry concerns the WordPress Tourfic plugin, affected in versions up to 2.23.1, with a Broken Access Control vulnerability affecting subscribers. The connected sources explicitly identify the vulnerability type and affected versions but do not provide technical details on the r...

EUVD-2026-57940

Subscriber Broken Access Control in Tourfic = 2.23.1 versions...

CVE-2026-27999 WordPress Tourfic plugin <= 2.23.1 - Broken Access Control vulnerability

Subscriber Broken Access Control in Tourfic = 2.23.1 versions...

CVE-2026-27535 WordPress Solace Extra plugin <= 1.6.0 - Broken Access Control vulnerability

Subscriber Broken Access Control in Solace Extra = 1.6.0 versions...

EUVD-2026-57933

Subscriber Broken Access Control in Solace Extra = 1.6.0 versions...

CVE-2026-27535

CVE-2026-27535 affects the WordPress Solace Extra plugin up to version 1.6.0. The vulnerability is described as Broken Access Control, enabling lower-privilege attackers to access restricted functionality. The CVSS 3.1 base score is 7.1 (High), with Network attack vector, Low attack complexity, P...

EUVD-2026-57931

Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce = 2.0.3 versions...

CVE-2026-27345 WordPress Taxi Booking Manager for WooCommerce plugin <= 2.0.3 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce = 2.0.3 versions...

CVE-2026-27345

The CVE-2026-27345 entry concerns the WordPress plugin “Taxi Booking Manager for WooCommerce” (versions

CVE-2025-52640

HCL AION is affected by a vulnerability where the shared storage used by product components is architected without sufficient access separation. Processes sharing the storage may be able to access or modify files beyond their intended scope, potentially resulting in unintended behavior or securit...

CVE-2026-14666

Incomplete tracking in PostgreSQL of changes to role membership, role attributes, and database ownership allows a query to continue using cached row-level security policies after those changes require a different policy, via plan reuse. Stale policies continue until some other event invalidates t...

CVE-2025-52640 HCL AION is affected by multiple security vulnerabilities.

HCL AION is affected by a vulnerability where the shared storage used by product components is architected without sufficient access separation. Processes sharing the storage may be able to access or modify files beyond their intended scope, potentially resulting in unintended behavior or securit...