CVE-2026-53985

CVE-2026-53985 affects Ground Station prior to version 0.6.0. It describes an unauthenticated denial-of-service in the Socket.IO server’s service_control event handler, allowing an unauthenticated network peer to forcibly terminate the ground-station process by sending a restart_service command. ...

CVE-2026-53985 Ground Station prior to 0.6.0 Unauthenticated DoS via service_control Socket.IO

Ground Station prior to 0.6.0 contains an unauthenticated denial-of-service vulnerability in the Socket.IO server's servicecontrol event handler that allows any unauthenticated network peer to forcibly terminate the ground-station process by sending a single restartservice command. Attackers can...

CVE-2026-66712

Unauthenticated Broken Access Control in Simple Membership = 4.7.8 versions...

CVE-2026-66708

Unauthenticated Broken Access Control in Total Upkeep = 1.17.2 versions...

CVE-2026-66699

Custom role Broken Access Control in Dokan = 5.0.10 versions...

CVE-2026-66701

Unauthenticated Broken Access Control in Profile Builder = 3.16.5 versions...

CVE-2026-66678

Contributor Broken Access Control in Advanced Custom Fields: Font Awesome Field = 6.1.1 versions...

CVE-2026-65554

Subscriber Broken Access Control in AnsPress – Question and answer 4.4.4 versions...

CVE-2026-65541

Unauthenticated Broken Access Control in Staff Training = 1.0.7 versions...

CVE-2026-65504

Unauthenticated Broken Access Control in BOX NOW Delivery Croatia = 3.3.0 versions...

CVE-2026-32548

Unauthenticated Broken Access Control in SureCart = 4.6.2 versions...

CVE-2026-25403

Unauthenticated Broken Access Control in Ultimate Store Kit Elementor Addons = 3.0.5 versions...

EUVD-2026-53911

Unauthenticated Broken Access Control in Total Upkeep = 1.17.2 versions...

CVE-2026-66708 WordPress Total Upkeep plugin <= 1.17.2 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Total Upkeep = 1.17.2 versions...

CVE-2026-66708

CVE-2026-66708 affects the WordPress plugin Total Upkeep (versions

CVE-2026-66701

Unauthenticated Broken Access Control in Profile Builder = 3.16.5 versions...

EUVD-2026-53905

Unauthenticated Broken Access Control in Profile Builder = 3.16.5 versions...

CVE-2026-66701

CVE-2026-66701 affects the WordPress Profile Builder plugin (versions

CVE-2026-66701 WordPress Profile Builder plugin <= 3.16.5 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Profile Builder = 3.16.5 versions...

CVE-2026-66699 WordPress Dokan plugin <= 5.0.10 - Broken Access Control vulnerability

Custom role Broken Access Control in Dokan = 5.0.10 versions...