CVE-2026-24577

CVE-2026-24577 is a Missing Authorization/broken access control vulnerability in the WordPress Pie Register plugin, affecting Pie Register versions up to 3.8.4.7. The issue arises from incorrectly configured access control security levels, enabling unauthorized access or privilege-related impact ...

CVE-2026-24544

Missing Authorization vulnerability in Harmonic Design HD Quiz hd-quiz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HD Quiz: from n/a through = 2.0.9...

CVE-2026-24543

Missing Authorization vulnerability in Horea Radu Materialis Companion materialis-companion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Materialis Companion: from n/a through = 1.3.52...

CVE-2026-24530 WordPress WebP Conversion plugin <= 2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in sheepfish WebP Conversion webp-conversion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebP Conversion: from n/a through = 2.2...

CVE-2026-24534

Missing Authorization vulnerability in uPress Booter booter-bots-crawlers-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booter: from n/a through = 1.5.7...

PT-2026-4387

Name of the Vulnerable Software and Affected Versions Prince Integrate Google Drive versions through 1.5.5 Description An authorization issue exists in Prince Integrate Google Drive’s integrate-google-drive component, allowing exploitation of incorrectly configured access control security levels...

CVE-2026-24567: Missing Authorization

Missing Authorization vulnerability in briarinc Anything Order by Terms anything-order-by-terms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Anything Order by Terms: from n/a through = 1.4.0...

CVE-2026-24540: Missing Authorization

Missing Authorization vulnerability in princeahmed Integrate Google Drive integrate-google-drive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Integrate Google Drive: from n/a through = 1.5.6...

CVE-2026-24556: Missing Authorization

Missing Authorization vulnerability in wpdive ElementCamp element-camp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ElementCamp: from n/a through = 2.3.2...

CVE-2026-24583: Missing Authorization

Missing Authorization vulnerability in sumup SumUp Payment Gateway For WooCommerce sumup-payment-gateway-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SumUp Payment Gateway For WooCommerce: from n/a through = 2.7.9...

CVE-2026-24616: Missing Authorization

Missing Authorization vulnerability in Damian WP Popups wp-popups-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Popups: from n/a through = 2.2.0.5...

PT-2026-4402

Name of the Vulnerable Software and Affected Versions Cloudinary versions prior to 3.3.0 Description An authorization issue exists in Cloudinary, a cloud-based image and video management platform. This issue involves incorrectly configured access control security levels, potentially allowing...

CVE-2026-24595: Missing Authorization

Missing Authorization vulnerability in zohocrm Zoho CRM Lead Magnet zoho-crm-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zoho CRM Lead Magnet: from n/a through = 1.8.1.9...

PT-2026-4410

Name of the Vulnerable Software and Affected Versions WP Travel versions through 11.0.0 Description An authorization issue exists in WP Travel. The vulnerability allows exploitation of incorrectly configured access control security levels. Recommendations Update WP Travel to a version later than...

PT-2026-4417

Name of the Vulnerable Software and Affected Versions Jahid Hasan Admin login URL Change versions through 1.1.5 Description An authorization issue exists in the Admin login URL Change functionality, specifically related to incorrectly configured access control security levels. This allows for...

PT-2026-4424

Name of the Vulnerable Software and Affected Versions kutsy AJAX Hits Counter + Popular Posts Widget versions through 0.10.210305 Description An issue exists in kutsy AJAX Hits Counter + Popular Posts Widget related to incorrectly configured access control security levels, potentially allowing...

CVE-2026-24615: Missing Authorization

Missing Authorization vulnerability in themebeez Cream Magazine cream-magazine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cream Magazine: from n/a through = 2.1.10...

CVE-2026-24636: Missing Authorization

Missing Authorization vulnerability in Syed Balkhi Sugar Calendar Lite sugar-calendar-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sugar Calendar Lite: from n/a through = 3.9.1...

PT-2026-4403

Name of the Vulnerable Software and Affected Versions FluentBoards versions through 1.91.1 Description A missing authorization issue exists in FluentBoards, allowing exploitation of incorrectly configured access control security levels. Recommendations At the moment, there is no information about...

CVE-2026-24607: Missing Authorization

Missing Authorization vulnerability in wptravelengine Travel Monster travel-monster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel Monster: from n/a through = 1.3.3...