CVE-2026-10630

WP Courses LMS (WordPress plugin) is vulnerable to Insecure Direct Object Reference (IDOR) in all versions up to and including 3.2.29 . The resultID parameter in the wpcq_get_quiz_result AJAX action lacks proper ownership validation, allowing authenticated users with custom-level access or above ...

WordPress WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses plugin <= 3.2.29 - Insecure Direct Object Reference to Authenticated (Custom+) Sensitive Information Disclosure vulnerability

Insecure Direct Object Reference to Authenticated Custom+ Sensitive Information Disclosure vulnerability discovered by Vapour in WordPress Plugin WP Courses LMS versions = 3.2.29...

EUVD-2026-65192

The WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.29 via the 'resultID' parameter due to missing validation on a user controlled key...

CVE-2018-7690

CVE-2018-7690 L'API REST di SSC contiene vulnerabilità di Insecure Direct Object Reference IDOR che consentono agli utenti autenticati di accedere a dettagli arbitrari degli utenti Local e LDAP tramite il metodo POST e a dettagli arbitrari dei progetti Fortify di altri utenti tramite il metodo GE...

autogpt-CVE-2026-30950-poc

AutoGPT CVE-2026-30950 POC Proof-of-Concept-Demonstration für CVE-2026-30950, eine authentifizierte IDOR Fehlende Autorisierung in der AutoGPT-Plattform, die es jedem angemeldeten Benutzer ermöglicht, die Chat-Sitzung eines anderen Benutzers über eine einzige PATCH-Anfrage neu zuzuweisen — und...

Sakai Profile Image Deletion has an IDOR

Summary The Sakai REST API endpoint DELETE /api/users/userId/profile/image does not verify that the requesting user is authorized to modify the target user's profile. Any authenticated user can delete the profile image of any other user, including administrators, by supplying a different userId i...

CVE-2025-65672

CVE-2025-65672 Insecure Direct Object Reference IDOR in classroomio 0.1.13 ermöglicht nicht autorisierten Zugriff auf Freigabe- und Einladungsfunktionen der Kurseinstellungen. Betroffenes Produkt: ClassroomIO Betroffene Version: 0.1.13 Entdeckt von: Rivek Raj Tamang RivuDon, Sikkim, Indien Detail...

CVE-2026-76073

Label Studio does not scope the annotation detail endpoint to the requesting user's organization. AnnotationAPI in labelstudio/tasks/api.py declares queryset = Annotation.objects.all and provides no getqueryset override, so the default lookup retrieves any annotation by primary key. The view's...

EUVD-2026-65060

Label Studio does not scope the annotation detail endpoint to the requesting user's organization. AnnotationAPI in labelstudio/tasks/api.py declares queryset = Annotation.objects.all and provides no getqueryset override, so the default lookup retrieves any annotation by primary key. The view's...

CVE-2026-66917

IDOR + XSS المخزّن عبر كسر التفويض على مستوى الكائن في JoomGallery JoomGallery ≤ 4.3.0 — مستخدم بدور المحرر يختطف أي صورة في المعرض ويخزّن حمولة XSS، مما يتيح الاستيلاء على جلسة المسؤول الملخص تتحقق الدالة UserimageController::save في JoomGallery من checkACL'edit', ... بدلاً من checkACL'edit.own'...

CVE-2026-76847

act starts an HTTP Artifacts V4 backend whenever a workflow uses actions/upload-artifact@v4 or actions/download-artifact@v4. The control-plane RPCs of that backend, including CreateArtifact, GetSignedArtifactURL, ListArtifacts, FinalizeArtifact and DeleteArtifact, accept a caller-supplied...

CVE-2026-78365 IDOR and missing authorization in Prospero Flow CRM supplier API allows cross-tenant read and modification

Authorization Bypass Through User-Controlled Key in the supplier API in Roskus Prospero Flow CRM 4.0.0 through 5.3.1 allows any authenticated user to read and modify another company's supplier record, and to reassign it to their own company, via a PUT request to /api/supplier/id setting companyid...

CVE-2026-78278

Subscriber Insecure Direct Object References IDOR in Fluent Boards Pro = 2.0.11 versions...

EUVD-2026-64785

Subscriber Insecure Direct Object References IDOR in Fluent Boards Pro = 2.0.11 versions...

CVE-2026-78278

Fluent Boards Pro is a WordPress plugin affected by a Subscriber-level Insecure Direct Object Reference (IDOR) vulnerability in versions ≤ 2.0.11 . The flaw is reachable over the network with no privileges required and low attack complexity , allowing an unauthenticated attacker to access objects...

CVE-2026-78278 WordPress Fluent Boards Pro plugin <= 2.0.11 - Insecure Direct Object References (IDOR) vulnerability

Subscriber Insecure Direct Object References IDOR in Fluent Boards Pro = 2.0.11 versions...

WordPress Fluent Boards Pro plugin <= 2.0.11 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Fluent Boards Pro versions = 2.0.11...

CVE-2026-8337

CVE-2026-8337 CVE-2026-8337 è una vulnerabilità Insecure Direct Object Reference IDOR in Concrete CMS che interessa la funzionalità Sondaggi. A differenza di CVE-2026-8347 che coinvolgeva le associazioni Express, questa vulnerabilità consente a un attaccante non autenticato di partecipare a un...

CVE-2026-78203

Ghostwriter before 7.1.2 contains a cross-client authorization flaw in the report template swap endpoint . The endpoint fails to validate template ownership, and because template primary keys are sequential, an authenticated attacker can enumerate and attach templates belonging to other clients t...

CVE-2026-14187 Tutor LMS < 4.0.6 - Instructor+ Cross-Instructor Private Course Disclosure via IDOR

The Tutor LMS WordPress plugin before 4.0.6 does not enforce per-object ownership checks on its course content type, allowing any user with the instructor role to read the content of private courses belonging to other instructors...