Lucene search
K

21321 matches found

Cvelist
Cvelist
added 2026/05/25 9:31 p.m.20 views

CVE-2026-24592 WordPress Auto Affiliate Links plugin <= 6.8.8.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Lucian Apostol Auto Affiliate Links allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Auto Affiliate Links: from n/a through 6.8.8.3...

5.3CVSS0.00231EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/25 9:31 p.m.5 views

CVE-2026-24592

Missing Authorization vulnerability in Lucian Apostol Auto Affiliate Links allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Auto Affiliate Links: from n/a through 6.8.8.3...

5.3CVSS5.8AI score0.00231EPSS
Exploits0References2
CVE
CVE
added 2026/05/25 9:31 p.m.14 views

CVE-2026-24592

CVE-2026-24592 affects WordPress Auto Affiliate Links plugin

5.3CVSS5.8AI score0.00231EPSS
Exploits0References1
NVD
NVD
added 2026/05/25 9:16 p.m.10 views

CVE-2026-24545

Missing Authorization vulnerability in Nikki Blight QR Redirector allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects QR Redirector: from n/a through 2.0.3...

4.3CVSS0.002EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/25 9:10 p.m.3 views

CVE-2026-24582

Missing Authorization vulnerability in WPPOOL FlexTable allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects FlexTable: from n/a through 3.24.0...

4.3CVSS5.8AI score0.002EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/05/25 9:10 p.m.19 views

CVE-2026-24582 WordPress FlexTable plugin <= 3.24.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPPOOL FlexTable allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects FlexTable: from n/a through 3.24.0...

4.3CVSS0.002EPSS
Exploits0References1
CVE
CVE
added 2026/05/25 9:10 p.m.15 views

CVE-2026-24582

The CVE-2026-24582 entry concerns the WordPress FlexTable plugin (versions up to and including 3.24.0) with a Broken Access Control/Missing Authorization vulnerability. The issue arises from incorrectly configured access control security levels, potentially enabling unauthorized access to sensiti...

4.3CVSS5.8AI score0.002EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/25 9:8 p.m.17 views

CVE-2026-24545 WordPress QR Redirector plugin <= 2.0.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Nikki Blight QR Redirector allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects QR Redirector: from n/a through 2.0.3...

4.3CVSS0.002EPSS
Exploits0References1
EUVD
EUVD
added 2026/05/25 9:8 p.m.10 views

EUVD-2026-31746

Missing Authorization vulnerability in Nikki Blight QR Redirector allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects QR Redirector: from n/a through 2.0.3...

4.3CVSS5.8AI score0.002EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/25 9:8 p.m.8 views

CVE-2026-24545 WordPress QR Redirector plugin <= 2.0.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Nikki Blight QR Redirector allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects QR Redirector: from n/a through 2.0.3...

4.3CVSS5.8AI score0.002EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/25 9:8 p.m.8 views

CVE-2026-24545

Missing Authorization vulnerability in Nikki Blight QR Redirector allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects QR Redirector: from n/a through 2.0.3...

4.3CVSS5.8AI score0.002EPSS
Exploits0References2
CVE
CVE
added 2026/05/25 9:8 p.m.17 views

CVE-2026-24545

CVE-2026-24545 concerns the WordPress plugin QR Redirector, affected versions up to 2.0.3. The root cause is a broken/incorrectly configured access control, described as a missing authorization vulnerability that allows bypassing security checks. The CVSS data (v3.1) indicates a network attack ve...

4.3CVSS5.8AI score0.002EPSS
Exploits0References1
NVD
NVD
added 2026/05/25 8:16 p.m.7 views

CVE-2026-24546

Missing Authorization vulnerability in Ruben Garcia GamiPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects GamiPress: from n/a through 7.6.3...

5.3CVSS0.00246EPSS
Exploits0References1
CVE
CVE
added 2026/05/25 7:26 p.m.18 views

CVE-2026-24546

The CVE covers WordPress GamiPress plugin versions up to 7.6.3 with a Missing Authorization vulnerability, arising from incorrectly configured access control levels. According to the connected data, the issue affects the GamiPress component (WordPress plugin) and is classified as a network-exploi...

5.3CVSS5.8AI score0.00246EPSS
Exploits0References1
EUVD
EUVD
added 2026/05/25 7:26 p.m.9 views

EUVD-2026-31723

Missing Authorization vulnerability in Ruben Garcia GamiPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects GamiPress: from n/a through 7.6.3...

5.3CVSS5.8AI score0.00246EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/25 7:26 p.m.5 views

CVE-2026-24546

Missing Authorization vulnerability in Ruben Garcia GamiPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects GamiPress: from n/a through 7.6.3...

5.3CVSS5.8AI score0.00246EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/05/25 7:26 p.m.6 views

CVE-2026-24546 WordPress GamiPress plugin <= 7.6.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ruben Garcia GamiPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects GamiPress: from n/a through 7.6.3...

5.3CVSS5.8AI score0.00246EPSS
Exploits0References1
Snyk
Snyk
added 2026/05/25 7:33 a.m.8 views

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the /mlflow-artifacts/mpu/ endpoints in --serve-artifacts mode. An attacker can gain unauthorized access to and overwrite artifacts belonging to other users by manipulating artifactpath and pathfilename argument...

9CVSS7.8AI score0.0038EPSS
Exploits1References2
Patchstack
Patchstack
added 2026/05/25 7:25 a.m.22 views

WordPress Kirki – Freeform Page Builder, Website Builder & Customizer plugin <= 6.0.6 - Missing Authorization to Authenticated (Subscriber+) Sensitive Form Submission Data Exposure vulnerability

Missing Authorization to Authenticated Subscriber+ Sensitive Form Submission Data Exposure vulnerability discovered by Z3no in WordPress Plugin Kirki – Freeform Page Builder, Website Builder & Customizer versions = 6.0.6...

6.5CVSS5.8AI score0.00348EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/25 12:0 a.m.7 views

PT-2026-43145

Name of the Vulnerable Software and Affected Versions MyCryptoCheckout versions prior to 2.162 Description A missing authorization issue in the MyCryptoCheckout plugin allows for the exploitation of incorrectly configured access control security levels, resulting in broken access control...

7.5CVSS5.8AI score0.00305EPSS
Exploits0References3
Rows per page
Query Builder