CVE-2026-24530 WordPress WebP Conversion plugin <= 2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in sheepfish WebP Conversion webp-conversion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebP Conversion: from n/a through = 2.2...

CVE-2026-24529

Missing Authorization vulnerability in Alejandro Quick Restaurant Reservations quick-restaurant-reservations allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Restaurant Reservations: from n/a through = 1.6.7...

CVE-2026-24522

Missing Authorization vulnerability in MyThemeShop WP Subscribe wp-subscribe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Subscribe: from n/a through = 1.2.16...

CVE-2026-24524 WordPress Tablesome plugin <= 1.2.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Essekia Tablesome tablesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tablesome: from n/a through = 1.2.8...

CVE-2025-14866

The Melapress Role Editor plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.1. This is due to a misconfigured capability check on the 'savesecondaryrolesfield' function. This makes it possible for authenticated attackers, with Subscriber-level...

WordPress plugin NextMove Lite has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-4464

Name of the Vulnerable Software and Affected Versions Rustaurius Ultimate Reviews versions through 3.2.16 Description An authorization bypass exists due to incorrectly configured access control security levels. This allows exploitation through a user-controlled key. There is no information about...

PT-2026-4390

Name of the Vulnerable Software and Affected Versions Materialis Companion versions through 1.3.52 Description A missing authorization issue exists in Materialis Companion, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update Materialis...

PT-2026-4447

Name of the Vulnerable Software and Affected Versions Cream Magazine versions through 2.1.10 Description An issue exists in Cream Magazine that relates to incorrectly configured access control security levels, potentially allowing unauthorized access. Recommendations Update Cream Magazine to a...

PT-2026-4382

Name of the Vulnerable Software and Affected Versions uPress Booter versions through 1.5.7 Description An authorization issue exists in uPress Booter’s booter-bots-crawlers-manager component. This allows exploitation due to incorrectly configured access control security levels. Recommendations...

PT-2026-4404

Name of the Vulnerable Software and Affected Versions Ryviu – Product Reviews for WooCommerce versions through 3.1.26 Description Ryviu – Product Reviews for WooCommerce contains a flaw related to incorrectly configured access control security levels, potentially allowing unauthorized access...

WordPress plugin Quick Restaurant Reservations has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-4413

Name of the Vulnerable Software and Affected Versions boxnow BOX NOW Delivery versions n/a through 3.0.2 Description An authorization issue exists in boxnow BOX NOW Delivery. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized access...

PT-2026-4412

Name of the Vulnerable Software and Affected Versions WisdmLabs Edwiser Bridge versions through 4.3.2 Description An authorization issue exists in WisdmLabs Edwiser Bridge. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized access...

PT-2026-4466

Name of the Vulnerable Software and Affected Versions Syed Balkhi Sugar Calendar Lite versions through 3.10.1 Description An issue exists in Syed Balkhi Sugar Calendar Lite related to incorrectly configured access control security levels, potentially allowing unauthorized access. Recommendations...

PT-2026-4416

Name of the Vulnerable Software and Affected Versions Genetech Products Pie Register versions through 3.8.4.7 Description An authorization issue exists in Pie Register that allows exploiting incorrectly configured access control security levels. Recommendations Update Pie Register to a version...

PT-2026-4448

Name of the Vulnerable Software and Affected Versions Damian WP Popups versions through 2.2.0.3 Description An issue exists in Damian WP Popups wp-popups-lite related to incorrectly configured access control security levels, allowing for missing authorization. The issue allows exploitation of...

PT-2026-4405

Name of the Vulnerable Software and Affected Versions LifePress versions through 2.1.3 Description An authorization issue exists in LifePress, allowing exploitation of incorrectly configured access control security levels. Recommendations Update LifePress to a version later than 2.1.3...

PT-2026-4417

Name of the Vulnerable Software and Affected Versions Jahid Hasan Admin login URL Change versions through 1.1.5 Description An authorization issue exists in the Admin login URL Change functionality, specifically related to incorrectly configured access control security levels. This allows for...

PT-2026-4378

Name of the Vulnerable Software and Affected Versions Alejandro Quick Restaurant Reservations versions through 1.6.7 Description An issue exists in Alejandro Quick Restaurant Reservations related to incorrectly configured access control security levels, allowing for missing authorization. The...