PT-2026-21083

Name of the Vulnerable Software and Affected Versions Leadpages versions through 1.1.3 Description A missing authorization issue exists in Leadpages, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Leadpages to a version later than 1.1.3...

PT-2026-21081

Name of the Vulnerable Software and Affected Versions LottieFiles versions through 3.0.0 Description An authorization issue exists in LottieFiles lottiefiles, allowing exploitation of incorrectly configured access control security levels. Recommendations Update to a version later than 3.0.0...

PT-2026-21082

Name of the Vulnerable Software and Affected Versions XLPlugins NextMove Lite versions through 2.23.0 Description An issue exists in XLPlugins NextMove Lite related to incorrectly configured access control security levels, allowing for missing authorization. This allows exploitation of the system...

PT-2026-21085

Name of the Vulnerable Software and Affected Versions Directorist versions through 8.5.10 Description An authorization issue exists in wpWax Directorist, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Directorist to a version later than 8.5....

CVE-2026-2819: Missing Authorization

A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.5.3. This vulnerability affects the function SaServletFilter of the file /workflow/instance/deleteByInstanceIds of the component Workflow Module. The manipulation leads to missing authorization. The attack may be initiated remotely...

CVE-2025-67972: Missing Authorization

Missing Authorization vulnerability in Zoho Mail Zoho ZeptoMail allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Zoho ZeptoMail: from n/a through 3.2.9...

CVE-2025-53217: Missing Authorization

Missing Authorization vulnerability in staviravn AIO WP Builder all-in-one-wp-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AIO WP Builder: from n/a through = 2.0.2...

CVE-2025-68542: Missing Authorization

Missing Authorization vulnerability in vgdevsolutions Checkout Gateway for IRIS checkout-gateway-iris allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Checkout Gateway for IRIS: from n/a through = 1.3...

PT-2026-21026

Name of the Vulnerable Software and Affected Versions SecuPress Free versions through 2.2.5.3 Description A missing authorization issue exists in SecuPress Free. The issue allows unauthorized access. Recommendations Update SecuPress Free to a version later than 2.2.5.3...

PT-2026-21031

Name of the Vulnerable Software and Affected Versions Seraphinite Solutions Seraphinite Accelerator versions through 2.22.15 Description A missing authorization issue exists in Seraphinite Accelerator, potentially allowing retrieval of embedded sensitive data. The issue affects the...

CVE-2025-68025: Missing Authorization

Missing Authorization vulnerability in Addonify Addonify Floating Cart For WooCommerce addonify-floating-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Addonify Floating Cart For WooCommerce: from n/a through = 1.2.17...

CVE-2025-68024: Missing Authorization

Missing Authorization vulnerability in Addonify Addonify – WooCommerce Wishlist addonify-wishlist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Addonify – WooCommerce Wishlist: from n/a through = 2.0.15...

CVE-2025-68564: Missing Authorization

Missing Authorization vulnerability in sendy Sendy sendy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sendy: from n/a through = 3.4.2...

CVE-2025-30416: Missing Authorization

Sensitive data disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 39938, Acronis Cyber Protect 15 Linux, Windows before build 41800...

CVE-2025-69063: Missing Authorization

Missing Authorization vulnerability in Saad Iqbal New User Approve new-user-approve allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects New User Approve: from n/a through = 3.2.0...

CVE-2025-68043: Missing Authorization

Missing Authorization vulnerability in LottieFiles LottieFiles lottiefiles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LottieFiles: from n/a through = 3.0.0...

CVE-2026-24946: Missing Authorization

Missing Authorization vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerce woocommerce-delivery-notes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through = 5.8.0...

CVE-2025-67969: Missing Authorization

Missing Authorization vulnerability in knitpay UPI QR Code Payment Gateway for WooCommerce upi-qr-code-payment-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UPI QR Code Payment Gateway for WooCommerce: from n/a through = 1.5.1...

PT-2026-20990

A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.5.3. This vulnerability affects the function SaServletFilter of the file /workflow/instance/deleteByInstanceIds of the component Workflow Module. The manipulation leads to missing authorization. The attack may be initiated remotely...

CVE-2025-68069: Missing Authorization

Missing Authorization vulnerability in wpWax Directorist directorist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directorist: from n/a through = 8.6.6...