4857 matches found
CVE-2026-66246
HCL iControl is affected by a Broken Access Control vulnerability. The issue stems from missing authentication checks or insecure direct object references (IDOR) , which could enable an attacker to perform privilege escalation and perform unauthorized modification or deletion of sensitive applica...
CVE-2026-62061
The WordPress ProfileGrid plugin (versions
CVE-2026-62061 WordPress ProfileGrid plugin <= 6.0.0.2 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfileGrid: from n/a through 6.0.0.2...
WordPress ProfileGrid plugin <= 6.0.0.2 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by Zenith in WordPress Plugin ProfileGrid versions = 6.0.0.2...
CVE-2026-102382 WordPress Majestic Support plugin <= 1.2.0 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from n/a through 1.2.0...
CVE-2026-102382
The Majestic Support WordPress plugin (versions
CVE-2026-102382 WordPress Majestic Support plugin <= 1.2.0 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from n/a through 1.2.0...
WordPress Majestic Support plugin <= 1.2.0 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by Peter Tang in WordPress Plugin Majestic Support versions = 1.2.0...
WordPress REST API Log plugin <= 1.7.2 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by Nixxies in WordPress Plugin REST API Log versions = 1.7.2...
WordPress WPFunnels plugin <= 3.13.1 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by Supakiad S. m3ez in WordPress Plugin WPFunnels versions = 3.13.1...
WordPress Photo Reviews for WooCommerce plugin <= 1.2.30 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by V1T in WordPress Plugin Photo Reviews for WooCommerce versions = 1.2.30...
CVE-2026-103496
In JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users' notifications...
CVE-2026-103491
In JetBrains YouTrack before 2026.2.19422 iDOR in the issue activities API allowed reading restricted issues...
WordPress Simply Schedule Appointments plugin <= 1.6.12.31 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Disclosure vulnerability
Insecure Direct Object Reference to Authenticated Subscriber+ Sensitive Information Disclosure vulnerability discovered by jtb75 in WordPress Plugin Simply Schedule Appointments versions = 1.6.12.31...
EUVD-2026-90587
In JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users' notifications...
CVE-2026-103496
In JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users' notifications...
CVE-2026-103496
In JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users' notifications...
CVE-2026-103496
In JetBrains YouTrack versions prior to 2026.2.19422 , an Insecure Direct Object Reference (iDOR) vulnerability in the inbox threads component allows an attacker to read notifications belonging to other users. The impact of this vulnerability includes unauthorized access to private notifications....