EVABS

EVABS Extremely Vulnerable Android Labs An open source Android application that is intentionally vulnerable so as to act as a learning platform for Android application security beginners. The effort is to introduce beginners with very limited or zero knowledge to some of the major and commonly...

linux-smart-enumeration

First, a couple of useful oneliners ; wget "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -O lse.sh;chmod 700 lse.sh curl "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -Lo lse.sh;chmod 700 lse.sh Note that...

slsa

SLSA "salsa" is Supply-chain Levels for Software Artifacts SLSA pronounced "salsa" is a security framework from source to service, giving anyone working with software a common language for increasing levels of software security and supply chain integrity. It’s how you get from safe enough to bein...

CVE-2026-62000

The WC Lovers WCFM Marketplace WordPress plugin (versions up to and including 3.8.2 ) is vulnerable to a Missing Authorization issue. This flaw stems from Incorrectly Configured Access Control Security Levels , which allows for broken access control. The vulnerability has a CVSS 3.1 base score of...

CVE-2026-62000 WordPress WCFM Marketplace plugin <= 3.8.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCFM Marketplace: from n/a through 3.8.2...

CVE-2026-103077

Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.2...

CVE-2026-119509 WordPress ClickCease Click Fraud Protection plugin <= 3.3.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in eranfl ClickCease Click Fraud Protection clickcease-click-fraud-protection allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ClickCease Click Fraud Protection: from n/a through 3.3.0...

CVE-2026-119509

The ClickCease Click Fraud Protection WordPress plugin (versions n/a through 3.3.0 ) is vulnerable to a Broken Access Control issue. The root cause is identified as Missing Authorization (CWE-862), which allows for the exploitation of incorrectly configured access control security levels. This vu...

CVE-2026-97072

The myCred WordPress plugin (versions through 4.0.2 ) is vulnerable to a Missing Authorization flaw. This vulnerability allows attackers to exploit Incorrectly Configured Access Control Security Levels . The impact is characterized by a MEDIUM severity base score of 4.3, where a low-privileged at...

CVE-2026-97072 WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.2...

CVE-2026-97072 WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.2...

CVE-2026-114187 WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AnyWhere Elementor: from n/a through 1.3.0...

CVE-2026-114187

The AnyWhere Elementor plugin (WPVibes) for WordPress, versions up to and including 1.3.0 , is susceptible to a Broken Access Control vulnerability (CWE-862). The root cause is incorrectly configured access control security levels , which allows for the exploitation of missing authorization. This...

CVE-2026-103077 WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through 4.0.2...

CVE-2026-103077

The myCred plugin for WordPress, affecting versions up to and including 4.0.2 , is vulnerable to a Broken Access Control issue (CWE-862 ). The vulnerability stems from incorrectly configured access control security levels , specifically involving missing authorization. This could allow an attacke...

CVE-2026-119485

The weDevs Dokan dokan-lite plugin for WordPress is vulnerable to a Broken Access Control (Missing Authorization) vulnerability in versions up to and including 5.3.2 . The flaw allows for exploiting Incorrectly Configured Access Control Security Levels . While the severity is rated as MEDIUM (CVS...

CVE-2026-39777 WordPress WCFM Membership plugin <= 2.12.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCFM Membership: from n/a through 2.12.0...

CVE-2026-119487

The Dokan dokan-lite plugin for WordPress versions up to and including 5.3.2 is vulnerable to a Broken Access Control (CWE-862) issue. The vulnerability is caused by Incorrectly Configured Access Control Security Levels , which allows for a Missing Authorization exploit. This flaw has a MEDIUM se...

CVE-2026-119487 WordPress Dokan plugin <= 5.3.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in weDevs Dokan dokan-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dokan: from n/a through 5.3.2...

CVE-2026-119487 WordPress Dokan plugin <= 5.3.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in weDevs Dokan dokan-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dokan: from n/a through 5.3.2...