CVE-2026-26964: Exposure of Sensitive Information to an Unauthorized Actor

Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. Versions 1.634.6 and below allow non-admin users to obtain Slack OAuth client secrets, which should only be accessible to workspace administrators. The GET...

CVE-2023-6810: Improper Access Control

The ClickCease Click Fraud Protection plugin for WordPress is vulnerable to unauthorized access of data due to an improper capability check on the getsettings function in all versions up to, and including, 3.2.4. This makes it possible for authenticated attackers, with author access and above, to...

WordPress ClickCease Click Fraud Protection plugin <= 3.2.4 - Improper Authorization to sensitive information exposure via get_settings vulnerability

Improper Authorization to sensitive information exposure via getsettings vulnerability discovered by Francesco Carlucci in WordPress Plugin ClickCease Click Fraud Protection versions = 3.2.4...