CVE-2026-97189

The Advanced Custom Fields ACF® WordPress plugin before 6.8.11 does not perform a read-permission check when it renders and formats the values of its relational fields, allowing users with post-editing access Contributor and above to disclose the titles and non-public statuses of other users'...

CVE-2026-97189

The Advanced Custom Fields (ACF®) WordPress plugin (versions before 6.8.11 ) is vulnerable to a read-permission check failure. The root cause is the lack of permission validation when the plugin renders and formats values within its relational fields . This allows users with post-editing access (...

EUVD-2026-118955

The Advanced Custom Fields ACF® WordPress plugin before 6.8.11 does not perform a read-permission check when it renders and formats the values of its relational fields, allowing users with post-editing access Contributor and above to disclose the titles and non-public statuses of other users'...

CVE-2025-25062

CVE-2025-25062 Description Usage Example Timeline Description A Stored Cross-Site-Scripting XSS vulnerability exists in the Backdrop CMS 1.29.2 post edit page. This script chains the vulnerability with a CSRF payload to achieve privilege escalation from the role of 'Editor' to 'Administrator'...

BIT-GHOST-2026-103273 Ghost 4.3.0 before 6.58.0 Incorrect Authorization via Staff Token

Ghost versions 4.3.0 before 6.58.0 contain an authentication bypass vulnerability where lower-privilege staff users can use staff tokens to bypass post editing restrictions. Attackers with staff credentials can leverage tokens to edit posts beyond their assigned privilege level...

PT-2026-109135

Ghost versions 4.3.0 before 6.58.0 contain an authentication bypass vulnerability where lower-privilege staff users can use staff tokens to bypass post editing restrictions. Attackers with staff credentials can leverage tokens to edit posts beyond their assigned privilege level...

Incorrect Authorization

Overview ghost is a publishing platform Affected versions of this package are vulnerable to Incorrect Authorization via staff tokens that bypass post editing restrictions. A lower-privilege staff user can present a staff token to edit posts beyond their assigned privilege level, circumventing the...

CVE-2026-103273

Ghost versions 4.3.0 before 6.58.0 contain an authentication bypass vulnerability where lower-privilege staff users can use staff tokens to bypass post editing restrictions. Attackers with staff credentials can leverage tokens to edit posts beyond their assigned privilege level...

CVE-2026-103273

Ghost versions 4.3.0 before 6.58.0 are affected by an authentication bypass vulnerability. The root cause is incorrect authorization via staff tokens, which allows lower-privilege staff users to bypass post editing restrictions. Specifically, attackers possessing staff credentials can leverage th...

CVE-2026-103273

Ghost versions 4.3.0 before 6.58.0 contain an authentication bypass vulnerability where lower-privilege staff users can use staff tokens to bypass post editing restrictions. Attackers with staff credentials can leverage tokens to edit posts beyond their assigned privilege level...

CVE-2026-103273 Ghost 4.3.0 before 6.58.0 Incorrect Authorization via Staff Token

Ghost versions 4.3.0 before 6.58.0 contain an authentication bypass vulnerability where lower-privilege staff users can use staff tokens to bypass post editing restrictions. Attackers with staff credentials can leverage tokens to edit posts beyond their assigned privilege level...

CVE-2026-103273 Ghost 4.3.0 before 6.58.0 Incorrect Authorization via Staff Token

Ghost versions 4.3.0 before 6.58.0 contain an authentication bypass vulnerability where lower-privilege staff users can use staff tokens to bypass post editing restrictions. Attackers with staff credentials can leverage tokens to edit posts beyond their assigned privilege level...

EUVD-2026-90666

Ghost versions 4.3.0 before 6.58.0 contain an authentication bypass vulnerability where lower-privilege staff users can use staff tokens to bypass post editing restrictions. Attackers with staff credentials can leverage tokens to edit posts beyond their assigned privilege level...

CVE-2026-103273 Ghost 4.3.0 before 6.58.0 Incorrect Authorization via Staff Token

Ghost versions 4.3.0 before 6.58.0 contain an authentication bypass vulnerability where lower-privilege staff users can use staff tokens to bypass post editing restrictions. Attackers with staff credentials can leverage tokens to edit posts beyond their assigned privilege level...

PT-2026-103805

Name of the Vulnerable Software and Affected Versions Ghost versions 4.3.0 through 6.57.0 Description An authentication bypass exists where staff users with lower privileges can utilize staff tokens to circumvent restrictions on editing posts. This allows individuals with staff credentials to...

CVE-2026-103273: Incorrect Authorization

Ghost versions 4.3.0 before 6.58.0 contain an authentication bypass vulnerability where lower-privilege staff users can use staff tokens to bypass post editing restrictions. Attackers with staff credentials can leverage tokens to edit posts beyond their assigned privilege level...

CVE-2026-16063

The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not sanitise or escape event timeline content submitted by users with post-editing access before storing it and rendering it on the public event page, allowing users with the Author role and above to inject arbitrary...

EUVD-2026-51949

The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not sanitise or escape event timeline content submitted by users with post-editing access before storing it and rendering it on the public event page, allowing users with the Author role and above to inject arbitrary...

PT-2026-67093

The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not sanitise or escape event timeline content submitted by users with post-editing access before storing it and rendering it on the public event page, allowing users with the Author role and above to inject arbitrary...

Camaleon CMS (2.1.1 to 2.9.1) contains an authenticated RCE vulnerability

Camaleon CMS versions 2.1.1 through 2.9.1 contains an authenticated remote code execution RCE vulnerability that allows users with customfields manage permission to execute arbitrary Ruby code by supplying a malicious expression through the selecteval custom field type. Attackers can store an...