CVE-2026-42843 grav-plugin-api: Grav API Privilege Escalation to Super Admin

Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content, media, configuration, users, and system management. Prior to 1.0.0-beta.15, an insecure direct object reference and logic flaw in the Grav API plugin UsersController::update allows any...

MINI-QFM9-7PQC-HPW5

Bulletin has no description...

MINI-PVG2-6R72-F8QM

Bulletin has no description...

MINI-JJWC-GQ9X-J467

Bulletin has no description...

MINI-JH72-V3V3-W38V

Bulletin has no description...

MINI-J67M-593H-VQ5P

Bulletin has no description...

MINI-H27P-MVGX-5XXF

Bulletin has no description...

MINI-476J-35MW-M28V

Bulletin has no description...

MINI-C37P-VC48-JRQW

Bulletin has no description...

MINI-9CHV-V6QF-PPMQ

Bulletin has no description...

MINI-9RC2-GGWW-HW2W

Bulletin has no description...

MINI-3H85-478C-88WF

Bulletin has no description...

MINI-3HV6-W79W-XPCW

Bulletin has no description...

MINI-8C29-36GG-H6PM

Bulletin has no description...

MINI-6W62-38RP-X6MR

Bulletin has no description...

MINI-5VP7-7QC3-VCG6

Bulletin has no description...

MINI-VG29-JQH6-MMH3

Bulletin has no description...

MINI-4F6X-XXJ4-3F52

Bulletin has no description...

MINI-9H6C-XHWW-55XG

Bulletin has no description...

MINI-RXRQ-WJH9-P6WC

Bulletin has no description...