CVE-2026-103075 WordPress Hustle plugin <= 7.8.14.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPMU DEV Hustle wordpress-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hustle: from n/a through 7.8.14.2...

CVE-2026-103075 WordPress Hustle plugin <= 7.8.14.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPMU DEV Hustle wordpress-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hustle: from n/a through 7.8.14.2...

CVE-2026-103075

The Hustle WordPress plugin (specifically the wordpress-popup component) versions up to and including 7.8.14.2 is vulnerable to a Broken Access Control issue. The root cause is a Missing Authorization vulnerability (CWE-862), which allows for the exploitation of incorrectly configured access cont...

CVE-2026-103075: Missing Authorization

Missing Authorization vulnerability in WPMU DEV Hustle wordpress-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hustle: from n/a through 7.8.14.2...

CVE-2026-39762 WordPress Autoship Cloud for WooCommerce Subscription Products plugin <= 2.17.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Patterns In The Cloud Autoship Cloud for WooCommerce Subscription Products autoship-cloud allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Autoship Cloud for WooCommerce Subscription Products: from n/a through 2.17.1...

CVE-2026-39730 WordPress Wise Chat plugin <= 3.4.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Marcin Wise Chat wise-chat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wise Chat: from n/a through 3.4.3...

CVE-2026-39762: Missing Authorization

Missing Authorization vulnerability in Patterns In The Cloud Autoship Cloud for WooCommerce Subscription Products autoship-cloud allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Autoship Cloud for WooCommerce Subscription Products: from n/a through 2.17.1...

PT-2026-106417

Name of the Vulnerable Software and Affected Versions Wise Chat versions prior to 3.4.3 Description An authorization flaw exists due to incorrectly configured access control security levels, which allows for broken access control for subscribers. Recommendations Update to version 3.4.3 or later...

CVE-2026-103337 WordPress WC Ukraine Shipping plugin <= 1.23.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Kirillbdev WC Ukraine Shipping wc-ukr-shipping allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WC Ukraine Shipping: from n/a through 1.23.2...

CVE-2026-103337

The Kirillbdev WC Ukraine Shipping plugin for WordPress is vulnerable to a Broken Access Control flaw (CWE-862) in versions up to and including 1.23.2 . The vulnerability stems from Missing Authorization , which allows for the exploitation of incorrectly configured access control security levels....

CVE-2026-103337 WordPress WC Ukraine Shipping plugin <= 1.23.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Kirillbdev WC Ukraine Shipping wc-ukr-shipping allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WC Ukraine Shipping: from n/a through 1.23.2...

CVE-2026-97303 WordPress Scratch & Win – Giveaways and Contests plugin <= 3.0.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Apps Mav Scratch & Win – Giveaways and Contests scratch-win-giveaways-for-website-facebook allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Scratch & Win – Giveaways and Contests: from n/a through 3.0.2...

CVE-2026-103086 WordPress UsersWP plugin <= 1.2.74 - Broken Access Control vulnerability

Missing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UsersWP: from n/a through 1.2.74...

CVE-2026-103086

The UsersWP WordPress plugin (versions up to and including 1.2.74 ) contains a Missing Authorization vulnerability. This flaw allows for the exploitation of incorrectly configured access control security levels , potentially leading to an integrity impact as indicated by the CVSS 3.1 vector. No s...

CVE-2026-97304 WordPress Timetics plugin <= 1.0.63 - Broken Access Control vulnerability

Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Timetics: from n/a through 1.0.63...

CVE-2026-102383

The VillaTheme Lookzy WordPress plugin (versions

CVE-2026-103086 WordPress UsersWP plugin <= 1.2.74 - Broken Access Control vulnerability

Missing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UsersWP: from n/a through 1.2.74...

CVE-2026-97304 WordPress Timetics plugin <= 1.0.63 - Broken Access Control vulnerability

Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Timetics: from n/a through 1.0.63...

CVE-2026-102383 WordPress Lookzy plugin <= 1.1.14 - Broken Access Control vulnerability

Missing Authorization vulnerability in VillaTheme Lookzy woo-lookbook allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lookzy: from n/a through 1.1.14...

CVE-2026-102383 WordPress Lookzy plugin <= 1.1.14 - Broken Access Control vulnerability

Missing Authorization vulnerability in VillaTheme Lookzy woo-lookbook allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lookzy: from n/a through 1.1.14...