PT-2026-4387

Name of the Vulnerable Software and Affected Versions Prince Integrate Google Drive versions through 1.5.5 Description An authorization issue exists in Prince Integrate Google Drive’s integrate-google-drive component, allowing exploitation of incorrectly configured access control security levels...

PT-2026-4386

Missing Authorization vulnerability in ABCdatos Protección de datos RGPD proteccion-datos-rgpd allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Protección de datos RGPD: from n/a through = 0.68...

PT-2026-4419

Name of the Vulnerable Software and Affected Versions Ecwid Shopping Cart versions through 7.0.5 Description The Ecwid Shopping Cart software contains a flaw related to incorrectly configured access control security levels, potentially allowing unauthorized access. The issue allows exploitation d...

PT-2026-4408

Name of the Vulnerable Software and Affected Versions iNET iNET Webkit versions through 1.2.4 Description An authorization issue exists in iNET iNET Webkit, specifically related to incorrectly configured access control security levels. This allows for potential exploitation of the system...

PT-2026-4444

Name of the Vulnerable Software and Affected Versions Orchid Store versions through 1.5.15 Description An issue exists in Orchid Store related to incorrectly configured access control security levels, allowing for missing authorization. The vulnerability allows exploitation due to this access...

PT-2026-4445

Name of the Vulnerable Software and Affected Versions Ecwid Shopping Cart versions through 7.0.5 Description The Ecwid Shopping Cart software contains a flaw related to incorrectly configured access control security levels, potentially allowing unauthorized access. The issue is a missing...

PT-2026-4388

Name of the Vulnerable Software and Affected Versions Download After Email versions through 2.1.9 Description A missing authorization issue exists in the Download After Email software. This flaw stems from incorrectly configured access control security levels, potentially allowing unauthorized...

PT-2026-4425

Name of the Vulnerable Software and Affected Versions topdevs Smart Product Viewer versions through 1.5.4 Description An issue exists in topdevs Smart Product Viewer related to incorrectly configured access control security levels, allowing for missing authorization. The vulnerability allows...

PT-2026-4405

Name of the Vulnerable Software and Affected Versions LifePress versions through 2.1.3 Description An authorization issue exists in LifePress, allowing exploitation of incorrectly configured access control security levels. Recommendations Update LifePress to a version later than 2.1.3...

PT-2026-4404

Name of the Vulnerable Software and Affected Versions Ryviu – Product Reviews for WooCommerce versions through 3.1.26 Description Ryviu – Product Reviews for WooCommerce contains a flaw related to incorrectly configured access control security levels, potentially allowing unauthorized access...

PT-2026-4412

Name of the Vulnerable Software and Affected Versions WisdmLabs Edwiser Bridge versions through 4.3.2 Description An authorization issue exists in WisdmLabs Edwiser Bridge. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized access...

PT-2026-4551

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions 4.0.14 through 4.0.16 Description phpMyFAQ is a web-based FAQ application. A flaw in authorization logic exists in versions 4.0.14 and below, exposing the /api/setup/backup API endpoint to any authenticated user, regardless o...

PT-2026-4424

Name of the Vulnerable Software and Affected Versions kutsy AJAX Hits Counter + Popular Posts Widget versions through 0.10.210305 Description An issue exists in kutsy AJAX Hits Counter + Popular Posts Widget related to incorrectly configured access control security levels, potentially allowing...

PT-2026-4466

Name of the Vulnerable Software and Affected Versions Syed Balkhi Sugar Calendar Lite versions through 3.10.1 Description An issue exists in Syed Balkhi Sugar Calendar Lite related to incorrectly configured access control security levels, potentially allowing unauthorized access. Recommendations...

PT-2026-4439

Name of the Vulnerable Software and Affected Versions X Addons for Elementor versions through 1.0.23 Description An issue exists in X Addons for Elementor where incorrectly configured access control security levels can be exploited, leading to a missing authorization condition. The vulnerability...

PT-2026-4382

Name of the Vulnerable Software and Affected Versions uPress Booter versions through 1.5.7 Description An authorization issue exists in uPress Booter’s booter-bots-crawlers-manager component. This allows exploitation due to incorrectly configured access control security levels. Recommendations...

PT-2026-4417

Name of the Vulnerable Software and Affected Versions Jahid Hasan Admin login URL Change versions through 1.1.5 Description An authorization issue exists in the Admin login URL Change functionality, specifically related to incorrectly configured access control security levels. This allows for...

PT-2026-4430

Name of the Vulnerable Software and Affected Versions Zoho CRM Lead Magnet versions through 1.8.1.5 Description An authorization issue exists in Zoho CRM Lead Magnet zoho-crm-forms, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Zoho CRM Lea...

PT-2026-4437

Name of the Vulnerable Software and Affected Versions themebeez Universal Google Adsense and Ads manager versions through 1.1.8 Description An issue exists in themebeez Universal Google Adsense and Ads manager related to incorrectly configured access control security levels, allowing for missing...

PT-2026-4378

Name of the Vulnerable Software and Affected Versions Alejandro Quick Restaurant Reservations versions through 1.6.7 Description An issue exists in Alejandro Quick Restaurant Reservations related to incorrectly configured access control security levels, allowing for missing authorization. The...