PT-2026-4025

Name of the Vulnerable Software and Affected Versions Peach Payments Gateway versions n/a through 3.3.6 Description A missing authorization issue exists in the Peach Payments Gateway. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized acces...

PT-2026-4242

Missing Authorization vulnerability in Rasedul Haque Rumi BD Courier Order Ratio Checker bd-courier-order-ratio-checker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BD Courier Order Ratio Checker: from n/a through = 2.0.1...

PT-2026-4238

Missing Authorization vulnerability in AbsolutePlugins Absolute Addons For Elementor absolute-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Absolute Addons For Elementor: from n/a through = 1.0.14...

PT-2026-4038

Name of the Vulnerable Software and Affected Versions TaxCloud for WooCommerce versions through 8.3.8 Description An authorization issue exists in TaxCloud for WooCommerce simple-sales-tax, allowing exploitation of incorrectly configured access control security levels. Recommendations Update...

PT-2026-3997

Name of the Vulnerable Software and Affected Versions Kapil Paul Payment Gateway bKash for WC versions through 3.1.0 Description The Payment Gateway bKash for WC has a flaw related to incorrectly configured access control security levels, leading to a missing authorization issue. This allows for...

PT-2026-4184

Missing Authorization vulnerability in e-plugins Real Estate Pro real-estate-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Real Estate Pro: from n/a through = 2.1.5...

PT-2026-4231

Missing Authorization vulnerability in Select-Themes Don Peppe donpeppe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Don Peppe: from n/a through = 1.3...

PT-2026-4249

Missing Authorization vulnerability in wpeverest User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through = 4.4.9...

PT-2026-4051

Name of the Vulnerable Software and Affected Versions Event Espresso versions through 5.0.37.decaf Description An authorization issue exists in Event Espresso 4 Decaf, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Event Espresso 4 Decaf to ...

PT-2026-4009

Name of the Vulnerable Software and Affected Versions merkulove Uper for Elementor versions through 1.0.5 Description An authorization issue exists in merkulove Uper for Elementor. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized access...

PT-2026-4004

Name of the Vulnerable Software and Affected Versions merkulove Imager for Elementor versions through 2.0.4 Description An authorization issue exists in merkulove Imager for Elementor imager-elementor, allowing exploitation of incorrectly configured access control security levels. The issue relat...

PT-2026-4182

Missing Authorization vulnerability in e-plugins Listihub listihub allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Listihub: from n/a through = 1.0.6...

PT-2026-4012

Name of the Vulnerable Software and Affected Versions merkulove Crumber versions through 1.0.10 Description An authorization issue exists in merkulove Crumber crumber-elementor due to incorrectly configured access control security levels. This allows for exploitation of the system. Recommendation...

PT-2026-4010

Name of the Vulnerable Software and Affected Versions merkulove Scroller versions through 2.0.2 Description An issue exists in merkulove Scroller related to incorrectly configured access control security levels, allowing for missing authorization. Recommendations Update merkulove Scroller to a...

PT-2026-3991

Name of the Vulnerable Software and Affected Versions Electron versions through 1.8.2 Description An authorization issue exists in Ninetheme Electron, allowing exploitation of incorrectly configured access control security levels. Recommendations Update to a version of Electron newer than 1.8.2...

PT-2026-4074

Name of the Vulnerable Software and Affected Versions e-plugins Hotel Listing versions through 1.4.2 Description The software contains a missing authorization issue related to incorrectly configured access control security levels. This allows for exploitation of the system. Recommendations Update...

PT-2026-4011

Name of the Vulnerable Software and Affected Versions merkulove Comparimager for Elementor versions through 1.0.1 Description An authorization issue exists in merkulove Comparimager for Elementor comparimager-elementor, allowing exploitation of incorrectly configured access control security level...

PT-2026-4254

Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 10.3.3...

PT-2026-4113

Name of the Vulnerable Software and Affected Versions Solace versions prior to 2.1.16 Description An authorization issue exists in Solace. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized access. Recommendations Update to a version later...

PT-2026-4140

Missing Authorization vulnerability in FmeAddons Registration & Login with Mobile Phone Number for WooCommerce registration-login-with-mobile-phone-number allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Registration & Login with Mobile Phone Number for...