PT-2026-21230

Name of the Vulnerable Software and Affected Versions weDevs Subscribe2 versions through 10.44 Description An authorization issue exists in weDevs Subscribe2, allowing exploitation of incorrectly configured access control security levels. Recommendations Update weDevs Subscribe2 to a version late...

PT-2026-21199

Name of the Vulnerable Software and Affected Versions WP FullCalendar versions through 1.6 Description The WP FullCalendar software contains a missing authorization flaw. This allows exploitation of incorrectly configured access control security levels. No information is available regarding the...

PT-2026-21228

Name of the Vulnerable Software and Affected Versions WP Job Portal versions through 2.4.4 Description The WP Job Portal software contains a flaw related to incorrectly configured access control security levels, potentially allowing unauthorized access. The issue is a missing authorization check...

PT-2026-21050

Name of the Vulnerable Software and Affected Versions VillaTheme HAPPY versions through 1.0.8 Description The software contains a missing authorization flaw due to incorrectly configured access control security levels. This allows for potential exploitation. Recommendations Update VillaTheme HAPP...

PT-2026-21121

Name of the Vulnerable Software and Affected Versions Saad Iqbal New User Approve versions through 3.2.0 Description An authorization issue exists in the New User Approve functionality, allowing exploitation due to incorrectly configured access control security levels. The affected functionality ...

PT-2026-21043

Name of the Vulnerable Software and Affected Versions knitpay UPI QR Code Payment Gateway for WooCommerce versions through 1.5.1 Description The software contains a missing authorization issue related to incorrectly configured access control security levels. This allows for exploitation of the...

PT-2026-21074

Name of the Vulnerable Software and Affected Versions Addonify Floating Cart For WooCommerce versions through 1.2.17 Description An authorization issue exists in Addonify Floating Cart For WooCommerce. The issue involves incorrectly configured access control security levels, potentially allowing...

PT-2026-21042

Name of the Vulnerable Software and Affected Versions Arya Dhiratara Optimize More! – Images versions through 1.1.3 Description The software contains a missing authorization issue, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Arya Dhiratar...

PT-2026-21126

Name of the Vulnerable Software and Affected Versions GhostPool Gauge versions through 6.56.4 Description A missing authorization flaw exists in the GhostPool Gauge gauge, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update GhostPool Gauge to...

PT-2026-21025

Name of the Vulnerable Software and Affected Versions Shared Files versions through 1.7.19 Description A missing authorization flaw exists in Anssi Laitila Shared Files shared-files. The issue impacts the application's ability to properly restrict access to resources. Recommendations Update to a...

PT-2026-21044

Name of the Vulnerable Software and Affected Versions vertim Schedula schedula-smart-appointment-booking versions through 1.0 Description An authorization issue exists in vertim Schedula schedula-smart-appointment-booking due to incorrectly configured access control security levels. This allows f...

PT-2026-21047

Name of the Vulnerable Software and Affected Versions Sunshine Photo Cart versions through 3.5.6.2 Description An authorization issue exists in Sunshine Photo Cart that allows exploitation of incorrectly configured access control security levels. Recommendations At the moment, there is no...

PT-2026-21162

Name of the Vulnerable Software and Affected Versions vanquish WooCommerce Bulk Product Editor versions through 3.0 Description The WooCommerce Bulk Product Editor, specifically the woocommerce-quick-product-editor component, exhibits a missing authorization issue. This flaw stems from incorrectl...

PT-2026-21076

Name of the Vulnerable Software and Affected Versions GA4WP: Google Analytics for WordPress versions through 2.10.0 Description An authorization issue exists in Passionate Brains GA4WP: Google Analytics for WordPress. The issue involves exploiting incorrectly configured access control security...

PT-2026-21166

Name of the Vulnerable Software and Affected Versions AgniHD Cartify - WooCommerce Gutenberg WordPress Theme versions through 1.3 Description The software contains a missing authorization issue related to incorrectly configured access control security levels. This allows for exploitation of the...

PT-2026-21026

Name of the Vulnerable Software and Affected Versions SecuPress Free versions through 2.2.5.3 Description A missing authorization issue exists in SecuPress Free. The issue allows unauthorized access. Recommendations Update SecuPress Free to a version later than 2.2.5.3...

PT-2026-21231

Name of the Vulnerable Software and Affected Versions Print Invoice & Delivery Notes for WooCommerce versions through 5.8.0 Description The software contains a flaw related to incorrectly configured access control security levels, potentially allowing unauthorized access. The issue is a missing...

PT-2026-21101

Name of the Vulnerable Software and Affected Versions Sync Master Sheet – Product Sync with Google Sheet for WooCommerce versions through 1.1.3 Description The software contains a missing authorization issue due to incorrectly configured access control security levels. This allows for unauthorize...

PT-2026-21130

Name of the Vulnerable Software and Affected Versions ModelTheme Framework versions through 1.9.2 Description An authorization issue exists in the ModelTheme Framework’s modeltheme-framework, allowing exploitation due to incorrectly configured access control security levels. Recommendations Updat...

PT-2026-21031

Name of the Vulnerable Software and Affected Versions Seraphinite Solutions Seraphinite Accelerator versions through 2.22.15 Description A missing authorization issue exists in Seraphinite Accelerator, potentially allowing retrieval of embedded sensitive data. The issue affects the...