PT-2026-27972

Name of the Vulnerable Software and Affected Versions Arraytics WPCafe versions n/a through 3.0.7 Description An authorization issue exists in Arraytics WPCafe wp-cafe due to incorrectly configured access control security levels. This allows for exploitation of the system. Recommendations Update...

WordPress plugin Petitioner 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

PT-2026-27850

Name of the Vulnerable Software and Affected Versions loopus WP Cost Estimation & Payment Forms Builder versions prior to 10.3.0 Description An authorization issue exists in loopus WP Cost Estimation & Payment Forms Builder’s WP Estimation Form component. The issue stems from incorrectly configur...

PT-2026-28055

Missing Authorization vulnerability in Premmerce Premmerce Redirect Manager premmerce-redirect-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premmerce Redirect Manager: from n/a through = 1.0.12...

PT-2026-28015

Missing Authorization vulnerability in wp-configurator WP Configurator Pro wp-configurator-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Configurator Pro: from n/a through = 3.7.9...

PT-2026-27996

Name of the Vulnerable Software and Affected Versions Product Rearrange for WooCommerce versions through 1.2.2 Description An authorization flaw exists in Product Rearrange for WooCommerce. This issue allows exploitation of incorrectly configured access control security levels. Recommendations...

PT-2026-27846

Name of the Vulnerable Software and Affected Versions WPFactory Helpdesk Support Ticket System for WooCommerce versions through 2.1.2 Description An authorization issue exists in WPFactory Helpdesk Support Ticket System for WooCommerce. The issue involves incorrectly configured access control...

PT-2026-27852

Name of the Vulnerable Software and Affected Versions The Grid versions prior to 2.8.0 Description An authorization issue exists in Theme-one The Grid. The problem stems from incorrectly configured access control security levels, potentially allowing unauthorized access. Recommendations Update Th...

PT-2026-27923

Name of the Vulnerable Software and Affected Versions Kargo Takip versions prior to 0.2.4 Description A missing authorization flaw exists in Özgür KARALAR Kargo Takip kargo-takip-turkiye. This issue stems from incorrectly configured access control security levels, potentially allowing unauthorize...

PT-2026-27935

Name of the Vulnerable Software and Affected Versions CoderPress Commerce Coinbase For WooCommerce versions through 1.6.6 Description An authorization issue exists in CoderPress Commerce Coinbase For WooCommerce commerce-coinbase-for-woocommerce. The issue involves exploiting incorrectly configur...

PT-2026-27887

Name of the Vulnerable Software and Affected Versions RadiusTheme Team versions n/a through 5.0.11 Description A missing authorization issue exists in RadiusTheme Team tlp-team. This allows exploitation of incorrectly configured access control security levels. Recommendations Update RadiusTheme...

PT-2026-27808

Name of the Vulnerable Software and Affected Versions Metagauss EventPrime versions n/a through 4.2.6.0 Description A missing authorization flaw exists in Metagauss EventPrime eventprime-event-calendar-management. This issue allows exploitation of incorrectly configured access control security...

PT-2026-28029

Name of the Vulnerable Software and Affected Versions Miraculous versions prior to 2.1.2 Description An authorization issue exists in Miraculous, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Miraculous to version 2.1.2 or later...

PT-2026-27955

Name of the Vulnerable Software and Affected Versions LiquidThemes Ave Core versions through 2.9.1 Description An authorization issue exists in LiquidThemes Ave Core. The problem stems from incorrectly configured access control security levels, potentially allowing unauthorized access...

PT-2026-27897

Name of the Vulnerable Software and Affected Versions PublishPress Authors versions through 4.10.1 Description A missing authorization flaw exists in PublishPress Authors. This issue allows exploitation of incorrectly configured access control security levels. Recommendations Update PublishPress...

PT-2026-27876

Name of the Vulnerable Software and Affected Versions WP System Log versions through 1.2.7 Description An authorization issue exists in activity-log.com WP System Log winterlock. This allows exploitation of incorrectly configured access control security levels. Recommendations Update WP System Lo...

PT-2026-27856

Name of the Vulnerable Software and Affected Versions WPVulnerability versions through 4.2.1 Description An authorization issue exists in Javier Casares WPVulnerability wpvulnerability. The issue stems from incorrectly configured access control security levels, potentially allowing unauthorized...

PT-2026-28009

Name of the Vulnerable Software and Affected Versions WP Terms Popup versions through 2.10.0 Description An authorization issue exists in WP Terms Popup. The issue involves exploiting incorrectly configured access control security levels. Recommendations Update WP Terms Popup to a version later...

PT-2026-27950

Name of the Vulnerable Software and Affected Versions MVPThemes The League versions through 4.4.1 Description A missing authorization flaw exists in MVPThemes The League. This allows exploitation of incorrectly configured access control security levels. Recommendations Update MVPThemes The League...

PT-2026-27947

Missing Authorization vulnerability in سید محمدامین هاشمی GZSEO gzseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GZSEO: from n/a through = 2.0.14...