CVE-2026-18322 Smart Popup by Supsystic <= 1.12.0 - Unauthenticated Privilege Escalation to Administrator

The Smart Popup by Supsystic plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.12.0. This is due to a permission map collision in the havePermissions function in classes/frame.php, where arraymerge overwrites the popup module's...

CVE-2026-18322

The Smart Popup by Supsystic WordPress plugin (versions ↜ 1.13.0 ) is vulnerable to unauthenticated privilege escalation leading to the creation of a persistent Administrator account. The root cause is a permission map collision in the havePermissions() function within classes/frame.php, where ar...

CVE-2026-55734

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian Guardian.Permissions module allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines...

PT-2026-67224

Name of the Vulnerable Software and Affected Versions ueberauth guardian versions 2.0.0 through 2.4.0 Description An allocation of resources without limits or throttling in the Guardian.Permissions module allows a denial of service via BEAM atom-table exhaustion. The Guardian.Permissions mixin...