CVE-2026-24567

Missing Authorization vulnerability in briarinc Anything Order by Terms anything-order-by-terms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Anything Order by Terms: from n/a through = 1.4.0...

CVE-2026-24569

Missing Authorization vulnerability in Sully Media Library File Size media-library-file-size allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Media Library File Size: from n/a through = 1.6.7...

CVE-2026-24551

Missing Authorization vulnerability in monetagwp Monetag Official Plugin monetag-official allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Monetag Official Plugin: from n/a through = 1.1.3...

CVE-2026-24535

Missing Authorization vulnerability in webdevstudios Automatic Featured Images from Videos automatic-featured-images-from-videos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Automatic Featured Images from Videos: from n/a through = 1.2.7...

CVE-2026-24530

Missing Authorization vulnerability in sheepfish WebP Conversion webp-conversion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebP Conversion: from n/a through = 2.1...

CVE-2026-24530 WordPress WebP Conversion plugin <= 2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in sheepfish WebP Conversion webp-conversion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebP Conversion: from n/a through = 2.2...

CVE-2026-24529

Missing Authorization vulnerability in Alejandro Quick Restaurant Reservations quick-restaurant-reservations allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Restaurant Reservations: from n/a through = 1.6.7...

CVE-2026-24524 WordPress Tablesome plugin <= 1.2.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Essekia Tablesome tablesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tablesome: from n/a through = 1.2.8...

CVE-2026-24522

Missing Authorization vulnerability in MyThemeShop WP Subscribe wp-subscribe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Subscribe: from n/a through = 1.2.16...

CVE-2025-14866

The Melapress Role Editor plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.1. This is due to a misconfigured capability check on the 'savesecondaryrolesfield' function. This makes it possible for authenticated attackers, with Subscriber-level...

PT-2026-4464

Name of the Vulnerable Software and Affected Versions Rustaurius Ultimate Reviews versions through 3.2.16 Description An authorization bypass exists due to incorrectly configured access control security levels. This allows exploitation through a user-controlled key. There is no information about...

WordPress plugin NextMove Lite has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-4390

Name of the Vulnerable Software and Affected Versions Materialis Companion versions through 1.3.52 Description A missing authorization issue exists in Materialis Companion, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update Materialis...

PT-2026-4447

Name of the Vulnerable Software and Affected Versions Cream Magazine versions through 2.1.10 Description An issue exists in Cream Magazine that relates to incorrectly configured access control security levels, potentially allowing unauthorized access. Recommendations Update Cream Magazine to a...

PT-2026-4378

Name of the Vulnerable Software and Affected Versions Alejandro Quick Restaurant Reservations versions through 1.6.7 Description An issue exists in Alejandro Quick Restaurant Reservations related to incorrectly configured access control security levels, allowing for missing authorization. The...

PT-2026-4448

Name of the Vulnerable Software and Affected Versions Damian WP Popups versions through 2.2.0.3 Description An issue exists in Damian WP Popups wp-popups-lite related to incorrectly configured access control security levels, allowing for missing authorization. The issue allows exploitation of...

PT-2026-4351

Name of the Vulnerable Software and Affected Versions Melapress Role Editor plugin for WordPress versions prior to 1.1.2 Description The Melapress Role Editor plugin for WordPress is subject to a privilege escalation issue. An attacker with Subscriber-level access or higher can assign themselves...

PT-2026-4405

Name of the Vulnerable Software and Affected Versions LifePress versions through 2.1.3 Description An authorization issue exists in LifePress, allowing exploitation of incorrectly configured access control security levels. Recommendations Update LifePress to a version later than 2.1.3...

PT-2026-4412

Name of the Vulnerable Software and Affected Versions WisdmLabs Edwiser Bridge versions through 4.3.2 Description An authorization issue exists in WisdmLabs Edwiser Bridge. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized access...

WordPress plugin Quick Restaurant Reservations has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...