PT-2026-4241

Missing Authorization vulnerability in hassantafreshi Easy Form Builder easy-form-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Form Builder: from n/a through = 3.9.6...

WordPress plugin Element Invader has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

WordPress plugin Civic Cookie Control has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-4113

Name of the Vulnerable Software and Affected Versions Solace versions prior to 2.1.16 Description An authorization issue exists in Solace. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized access. Recommendations Update to a version later...

PT-2026-4230

Missing Authorization vulnerability in Select-Themes Prowess prowess allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Prowess: from n/a through = 1.8.1...

PT-2026-4022

Name of the Vulnerable Software and Affected Versions Tickera versions through 3.5.6.2 Description A missing authorization issue exists in Tickera tickera-event-ticketing-system, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Tickera to a...

PT-2026-4062

Name of the Vulnerable Software and Affected Versions cleverplugins SEO Booster versions through 6.1.8 Description An issue exists in SEO Booster related to incorrectly configured access control security levels, allowing for missing authorization. The vulnerability allows exploitation of these...

PT-2026-4005

Name of the Vulnerable Software and Affected Versions Carter for Elementor versions through 1.0.2 Description An authorization issue exists in Carter for Elementor, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Carter for Elementor to a...

PT-2026-4219

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Holmes holmes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Holmes: from n/a through = 1.7...

WordPress plugin Fleur has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There we...

PT-2026-4010

Name of the Vulnerable Software and Affected Versions merkulove Scroller versions through 2.0.2 Description An issue exists in merkulove Scroller related to incorrectly configured access control security levels, allowing for missing authorization. Recommendations Update merkulove Scroller to a...

PT-2026-4270

Missing Authorization vulnerability in Arul Prasad J WP Quick Post Duplicator wp-quick-post-duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Quick Post Duplicator: from n/a through = 2.1...

WordPress plugin Don Peppe security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. The WordPre...

PT-2026-3991

Name of the Vulnerable Software and Affected Versions Electron versions through 1.8.2 Description An authorization issue exists in Ninetheme Electron, allowing exploitation of incorrectly configured access control security levels. Recommendations Update to a version of Electron newer than 1.8.2...

PT-2026-4232

Missing Authorization vulnerability in Mikado-Themes Wanderland wanderland allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wanderland: from n/a through = 1.5...

PT-2026-4242

Missing Authorization vulnerability in Rasedul Haque Rumi BD Courier Order Ratio Checker bd-courier-order-ratio-checker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BD Courier Order Ratio Checker: from n/a through = 2.0.1...

PT-2026-4008

Name of the Vulnerable Software and Affected Versions Audier For Elementor versions through 1.0.9 Description An issue exists in Audier For Elementor related to incorrectly configured access control security levels, allowing for missing authorization. The issue allows exploitation of these securi...

PT-2026-3987

Name of the Vulnerable Software and Affected Versions Jthemes xSmart versions through 1.2.9.4 Description An issue exists in Jthemes xSmart related to incorrectly configured access control security levels, allowing for missing authorization. The issue allows exploitation of access control...

PT-2026-4185

Missing Authorization vulnerability in e-plugins WP Membership wp-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Membership: from n/a through = 1.6.4...

PT-2026-4217

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Fiorello fiorello allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fiorello: from n/a through = 1.0...