CVE-2026-23547

Missing Authorization vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-composer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CMSMasters Content Composer: from n/a through = 2.5.8...

WordPress plugin PawFriends 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-21228

Name of the Vulnerable Software and Affected Versions WP Job Portal versions through 2.4.4 Description The WP Job Portal software contains a flaw related to incorrectly configured access control security levels, potentially allowing unauthorized access. The issue is a missing authorization check...

PT-2026-21070

Name of the Vulnerable Software and Affected Versions ConveyThis versions prior to 269.6 Description An authorization issue exists in ConveyThis conveythis-translate, allowing exploitation of incorrectly configured access control security levels. Recommendations Update to a version prior to 269.6...

PT-2026-21121

Name of the Vulnerable Software and Affected Versions Saad Iqbal New User Approve versions through 3.2.0 Description An authorization issue exists in the New User Approve functionality, allowing exploitation due to incorrectly configured access control security levels. The affected functionality ...

WordPress plugin ConveyThis 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

WordPress plugin Gauge 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

WordPress plugin LC Wizard 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

PT-2026-21084

Name of the Vulnerable Software and Affected Versions Shiprocket versions n/a through 2.0.8 Description An authorization bypass exists due to incorrectly configured access control security levels. This allows exploitation through a user-controlled key. Recommendations Update Shiprocket to a versi...

PT-2026-21088

Name of the Vulnerable Software and Affected Versions Cozmoslabs Paid Member Subscriptions versions n/a through 2.16.8 Description An authorization bypass exists due to incorrectly configured access control security levels in Cozmoslabs Paid Member Subscriptions. The issue allows exploitation...

PT-2026-21076

Name of the Vulnerable Software and Affected Versions GA4WP: Google Analytics for WordPress versions through 2.10.0 Description An authorization issue exists in Passionate Brains GA4WP: Google Analytics for WordPress. The issue involves exploiting incorrectly configured access control security...

WordPress plugin Addonify Floating Cart For WooCommerce 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added t...

PT-2026-21081

Name of the Vulnerable Software and Affected Versions LottieFiles versions through 3.0.0 Description An authorization issue exists in LottieFiles lottiefiles, allowing exploitation of incorrectly configured access control security levels. Recommendations Update to a version later than 3.0.0...

PT-2026-21061

Name of the Vulnerable Software and Affected Versions Atarim versions through 4.2.1 Description A missing authorization issue exists in Vito Peleg Atarim atarim-visual-collaboration, allowing exploitation of incorrectly configured access control security levels. Recommendations At the moment, the...

PT-2026-21085

Name of the Vulnerable Software and Affected Versions Directorist versions through 8.5.10 Description An authorization issue exists in wpWax Directorist, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Directorist to a version later than 8.5....

PT-2026-21082

Name of the Vulnerable Software and Affected Versions XLPlugins NextMove Lite versions through 2.23.0 Description An issue exists in XLPlugins NextMove Lite related to incorrectly configured access control security levels, allowing for missing authorization. This allows exploitation of the system...

PT-2026-21100

Name of the Vulnerable Software and Affected Versions Sendy versions through 3.4.2 Description An authorization issue exists in Sendy that allows exploitation of incorrectly configured access control security levels. Recommendations Update Sendy to a version later than 3.4.2...

PT-2026-21095

Name of the Vulnerable Software and Affected Versions vgdevsolutions Checkout Gateway for IRIS versions through 1.3 Description An authorization issue exists in vgdevsolutions Checkout Gateway for IRIS. The issue involves incorrectly configured access control security levels, potentially allowing...

PT-2026-21169

Name of the Vulnerable Software and Affected Versions Cliengo – Chatbot versions through 3.0.4 Description An authorization issue exists in Cliengo – Chatbot, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update Cliengo – Chatbot to a version...

WordPress plugin Shiprocket 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...