PT-2026-4466

Name of the Vulnerable Software and Affected Versions Syed Balkhi Sugar Calendar Lite versions through 3.10.1 Description An issue exists in Syed Balkhi Sugar Calendar Lite related to incorrectly configured access control security levels, potentially allowing unauthorized access. Recommendations...

PT-2026-4413

Name of the Vulnerable Software and Affected Versions boxnow BOX NOW Delivery versions n/a through 3.0.2 Description An authorization issue exists in boxnow BOX NOW Delivery. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized access...

PT-2026-4382

Name of the Vulnerable Software and Affected Versions uPress Booter versions through 1.5.7 Description An authorization issue exists in uPress Booter’s booter-bots-crawlers-manager component. This allows exploitation due to incorrectly configured access control security levels. Recommendations...

PT-2026-4417

Name of the Vulnerable Software and Affected Versions Jahid Hasan Admin login URL Change versions through 1.1.5 Description An authorization issue exists in the Admin login URL Change functionality, specifically related to incorrectly configured access control security levels. This allows for...

PT-2026-4416

Name of the Vulnerable Software and Affected Versions Genetech Products Pie Register versions through 3.8.4.7 Description An authorization issue exists in Pie Register that allows exploiting incorrectly configured access control security levels. Recommendations Update Pie Register to a version...

WordPress plugin Quick Restaurant Reservations has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-4410

Name of the Vulnerable Software and Affected Versions WP Travel versions through 11.0.0 Description An authorization issue exists in WP Travel. The vulnerability allows exploitation of incorrectly configured access control security levels. Recommendations Update WP Travel to a version later than...

PT-2026-4375

Name of the Vulnerable Software and Affected Versions CloudPanel CLP Varnish Cache versions through 1.0.2 Description An authorization issue exists in CloudPanel CLP Varnish Cache. The problem involves incorrectly configured access control security levels, potentially allowing unauthorized access...

PT-2026-4450

Name of the Vulnerable Software and Affected Versions PopCash versions prior to 1.9 Description The PopCash Code Integration Tool has a flaw related to incorrectly configured access control security levels, potentially allowing unauthorized access. The tool is susceptible to missing authorization...

PT-2026-4432

Name of the Vulnerable Software and Affected Versions bestwebsoft Multilanguage by BestWebSoft versions through 1.5.2 Description The software contains a missing authorization issue related to incorrectly configured access control security levels. Recommendations Update bestwebsoft Multilanguage ...

PT-2026-4391

Name of the Vulnerable Software and Affected Versions HD Quiz versions through 2.0.9 Description The software contains a missing authorization issue due to incorrectly configured access control security levels. This allows for exploitation of the system. Recommendations Update HD Quiz to a versio...

PT-2026-4441

Name of the Vulnerable Software and Affected Versions Travel Monster versions through 1.3.3 Description An issue exists in Travel Monster related to incorrectly configured access control security levels, allowing for missing authorization. The vulnerability allows exploitation of these levels...

WordPress plugin trusona has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. WordPress...

WordPress plugin Ecwid Shopping Cart has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

CVE-2026-24379

Authorization Bypass Through User-Controlled Key vulnerability in wpjobportal WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Portal: from n/a through = 2.4.3...

CVE-2026-24353

Missing Authorization vulnerability in wpeverest User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through = 4.4.9...

CVE-2026-22481

Missing Authorization vulnerability in Rasedul Haque Rumi BD Courier Order Ratio Checker bd-courier-order-ratio-checker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BD Courier Order Ratio Checker: from n/a through = 2.0.1...

CVE-2026-22447

Missing Authorization vulnerability in Select-Themes Prowess prowess allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Prowess: from n/a through = 1.8.1...

CVE-2026-22430

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Verdure verdure allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Verdure: from n/a through = 1.6...

CVE-2026-22411

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Dolcino dolcino allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dolcino: from n/a through = 1.6...