PT-2026-21049

Name of the Vulnerable Software and Affected Versions aDirectory versions through 3.0.3 Description The software contains a missing authorization issue stemming from incorrectly configured access control security levels. This allows for exploitation of the system. Recommendations Update aDirector...

PT-2026-21034

Name of the Vulnerable Software and Affected Versions staviravn AIO WP Builder versions through 2.0.2 Description An authorization issue exists in staviravn AIO WP Builder all-in-one-wp-builder, allowing exploitation of incorrectly configured access control security levels. Recommendations Update...

PT-2026-21091

Name of the Vulnerable Software and Affected Versions PDF for WPForms versions through 6.3.0 Description A missing authorization issue exists in PDF for WPForms, allowing exploitation due to incorrectly configured access control security levels. The issue is present in add-ons.org PDF for WPForms...

PT-2026-21072

Name of the Vulnerable Software and Affected Versions Addonify – Compare Products For WooCommerce versions through 1.1.17 Description The Addonify – Compare Products For WooCommerce addon has an issue related to incorrectly configured access control security levels, allowing for unauthorized...

PT-2026-21080

Name of the Vulnerable Software and Affected Versions Travelpayouts versions through 1.2.1 Description An authorization issue exists in Travelpayouts travelpayouts, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Travelpayouts to a version...

PT-2026-21071

Name of the Vulnerable Software and Affected Versions Plugin BlueX for WooCommerce versions through 3.1.6 Description An issue exists in Plugin BlueX for WooCommerce related to incorrectly configured access control security levels, potentially allowing unauthorized access. The issue involves a...

PT-2026-21050

Name of the Vulnerable Software and Affected Versions VillaTheme HAPPY versions through 1.0.8 Description The software contains a missing authorization flaw due to incorrectly configured access control security levels. This allows for potential exploitation. Recommendations Update VillaTheme HAPP...

PT-2026-21070

Name of the Vulnerable Software and Affected Versions ConveyThis versions prior to 269.6 Description An authorization issue exists in ConveyThis conveythis-translate, allowing exploitation of incorrectly configured access control security levels. Recommendations Update to a version prior to 269.6...

PT-2026-21078

Name of the Vulnerable Software and Affected Versions Passionate Brains Advanced WC Analytics versions through 3.19.0 Description An authorization issue exists in Passionate Brains Advanced WC Analytics, allowing exploitation due to incorrectly configured access control security levels...

PT-2026-21041

Name of the Vulnerable Software and Affected Versions uixthemes Konte versions through 2.4.6 Description An authorization issue exists in uixthemes Konte. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized access. Recommendations Update...

CVE-2026-26977: Missing Authorization

Frappe Learning Management System LMS is a learning system that helps users structure their content. In versions 2.44.0 and below, unauthorized users are able to access the details of unpublished courses via API endpoints. A fix for this issue is planned for the 2.45.0 release...

PT-2026-21230

Name of the Vulnerable Software and Affected Versions weDevs Subscribe2 versions through 10.44 Description An authorization issue exists in weDevs Subscribe2, allowing exploitation of incorrectly configured access control security levels. Recommendations Update weDevs Subscribe2 to a version late...

CVE-2025-67974: Missing Authorization

Missing Authorization vulnerability in WP Legal Pages WPLegalPages wplegalpages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPLegalPages: from n/a through = 3.5.4...

CVE-2025-69381: Missing Authorization

Missing Authorization vulnerability in vanquish WooCommerce Bulk Product Editor woocommerce-quick-product-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Bulk Product Editor: from n/a through = 3.0...

CVE-2025-68837: Missing Authorization

Missing Authorization vulnerability in ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticket-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ELEX WordPress HelpDesk & Customer Ticketing System: from...

CVE-2025-68534: Missing Authorization

Missing Authorization vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PDF for WPForms: from n/a through = 6.3.0...

CVE-2025-69298: Missing Authorization

Missing Authorization vulnerability in GhostPool Gauge gauge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gauge: from n/a through = 6.56.4...

CVE-2025-67970: Missing Authorization

Missing Authorization vulnerability in vertim Schedula schedula-smart-appointment-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Schedula: from n/a through = 1.0...

CVE-2025-67624: Missing Authorization

Missing Authorization vulnerability in Arya Dhiratara Optimize More! – Images optimize-more-images allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optimize More! – Images: from n/a through = 1.1.3...

CVE-2025-67547: Missing Authorization

Missing Authorization vulnerability in uixthemes Konte konte allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Konte: from n/a through = 2.4.6...