1493926 matches found
CVE-2026-111235 OpenNMS REST authorization bypass via non-canonical HTTP method
An authorization bypass vulnerability exists in the REST API of multiple versions of OpenNMS Meridian and Horizon. The /rest/ Spring Security filter chains authorize requests with intercept-url rules that name the HTTP method as an uppercase token, compare the method case-sensitively, and have no...
CVE-2026-111235 OpenNMS REST authorization bypass via non-canonical HTTP method
An authorization bypass vulnerability exists in the REST API of multiple versions of OpenNMS Meridian and Horizon. The /rest/ Spring Security filter chains authorize requests with intercept-url rules that name the HTTP method as an uppercase token, compare the method case-sensitively, and have no...
EUVD-2026-102302
Missing Authorization vulnerability in Planet studio PlanetStudio Payment Gateway planetstudio-payment-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PlanetStudio Payment Gateway: from n/a through 1.3.3...
CVE-2026-110362
The PlanetStudio Payment Gateway WordPress plugin (versions
EUVD-2026-102253
Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login with phone number: from n/a through 1.8.77...
CVE-2026-110374 WordPress Login with phone number plugin <= 1.8.77 - Broken Access Control vulnerability
Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login with phone number: from n/a through 1.8.77...
CVE-2026-110374
The Login with phone number WordPress plugin (versions
CVE-2026-108499 WordPress Knowledge Base plugin <= 3.2.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in WebberZone Knowledge Base knowledgebase allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Knowledge Base: from n/a through 3.2.0...
CVE-2026-110364
The Flexible Quantity – Measurement Price Calculator for WooCommerce plugin (versions
EUVD-2026-102250
Missing Authorization vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce flexible-quantity-measurement-price-calculator-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flexible Quantity – Measurement...
CVE-2026-110364 WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.23 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce flexible-quantity-measurement-price-calculator-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flexible Quantity – Measurement...
CLSA-2026-1792088148 TuxCare security update for org.springframework.amqp (4 CVEs)
TuxCare rebuilt 4 org.springframework.amqp packages to address 4 CVEs. Fixed in 2.2.12.RELEASE-tuxcare.1...
CVE-2026-109689
The WordPress Sunshine Photo Cart plugin (versions ≤ 3.7.4 ) is affected by a Broken Access Control vulnerability (CWE-862). The issue arises from Incorrectly Configured Access Control Security Levels , specifically a missing authorization check within the sunshine-photo-cart component. This coul...
CVE-2026-110360 WordPress Ajax Search Lite plugin <= 4.14.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in WPdreams Ajax Search Lite ajax-search-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ajax Search Lite: from n/a through 4.14.5...
CVE-2026-110360
The WPdreams Ajax Search Lite plugin (versions
CVE-2026-109897
The Strong Testimonials WordPress plugin (versions
CVE-2026-109897 WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.12...
EUVD-2026-54222
GitHub CLI allows attestation verification bypass through unescaped regex metacharacters...
CVE-2026-110378 WordPress Ninja Forms Signature Contract Add-On plugin <= 3.2.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP E-Signature Ninja Forms Signature Contract Add-On ninja-signature-contract-forms-add-on allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ninja Forms Signature Contract Add-On: from n/a through 3.2.5...