CVE-2026-16064: Incorrect Authorization

The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not properly verify authorization on the object being modified when quick-editing events, only checking a global capability, allowing users with the Contributor role and above to modify the title and publication status o...

PT-2023-16246

Name of the Vulnerable Software and Affected Versions The GPT AI Power: Content Writer & ChatGPT & Image Generator & WooCommerce Product Writer & AI Training WordPress plugin versions prior to 1.4.38 Description The issue concerns the lack of nonce or privilege checks, allowing logged-in users to...