CVE-2026-62047

The Liquid Web / StellarWP Event Tickets plugin is affected by a Broken Access Control vulnerability (CVE-2026-62047) in versions

CVE-2026-62122

The WordPress Booktics plugin (versions

CVE-2026-62122 WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerability

Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.31...

CVE-2026-62122 WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerability

Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.31...

CVE-2026-62055

The Liquid Web / StellarWP Event Tickets WordPress plugin (versions

CVE-2026-62055 WordPress Event Tickets plugin <= 5.30.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.2...

CVE-2026-119367 WordPress The Events Calendar plugin <= 6.18.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Events Calendar: from n/a through 6.18.2...

CVE-2026-119367

The The Events Calendar plugin for WordPress (versions

CVE-2026-119367 WordPress The Events Calendar plugin <= 6.18.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Events Calendar: from n/a through 6.18.2...

CVE-2026-62141

The WordPress Fluent CRM plugin (managed by WP ManageNinja LLC) is vulnerable to a Broken Access Control vulnerability in versions up to and including 3.2.6 . The root cause is a Missing Authorization issue (CWE-862) caused by incorrectly configured access control security levels. This flaw allow...

CVE-2026-62141 WordPress Fluent CRM plugin <= 3.2.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent CRM: from n/a through 3.2.6...

CVE-2026-62141 WordPress Fluent CRM plugin <= 3.2.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent CRM: from n/a through 3.2.6...

CVE-2026-116407 WordPress Webba Booking plugin <= 6.5.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webba Booking: from n/a through 6.5.4...

CVE-2026-116407 WordPress Webba Booking plugin <= 6.5.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webba Booking: from n/a through 6.5.4...

CVE-2026-119368 WordPress The Events Calendar plugin <= 6.18.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Events Calendar: from n/a through 6.18.2...

CVE-2026-119368 WordPress The Events Calendar plugin <= 6.18.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Events Calendar: from n/a through 6.18.2...

CVE-2026-119368

The The Events Calendar plugin for WordPress (versions up to and including 6.18.2 ) is susceptible to a Missing Authorization vulnerability. This flaw allows for the exploitation of Incorrectly Configured Access Control Security Levels . The impact is characterized as a low confidentiality risk w...

CVE-2026-119482 WordPress JetFormBuilder plugin <= 3.6.7.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetFormBuilder: from n/a through 3.6.7.1...

CVE-2026-119482

The Crocoblock JetFormBuilder plugin for WordPress (versions through 3.6.7.1 ) is vulnerable to a Missing Authorization issue. This flaw allows for exploiting Incorrectly Configured Access Control Security Levels . While the CVSS score indicates a medium severity (5.3) with low complexity and no ...

CVE-2026-119482 WordPress JetFormBuilder plugin <= 3.6.7.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetFormBuilder: from n/a through 3.6.7.1...