CVE-2026-85576

The All in One Files Upload WordPress plugin before 2.0.17 does not have any capability check, and does not verify the authenticity of the request, when saving its settings, allowing any authenticated user, such as a subscriber, to change them...

EUVD-2026-89630

The All in One Files Upload WordPress plugin before 2.0.17 does not have any capability check, and does not verify the authenticity of the request, when saving its settings, allowing any authenticated user, such as a subscriber, to change them...

CVE-2026-81801

Subscriber Settings Change in WP-Stateless = 4.4.1 versions...

CVE-2026-81801 WordPress WP-Stateless plugin <= 4.4.1 - Settings Change vulnerability

Subscriber Settings Change in WP-Stateless = 4.4.1 versions...

EUVD-2026-75530

Subscriber Settings Change in WP-Stateless = 4.4.1 versions...

CVE-2026-81801 WordPress WP-Stateless plugin <= 4.4.1 - Settings Change vulnerability

Subscriber Settings Change in WP-Stateless = 4.4.1 versions...

CVE-2026-81801

The WP-Stateless WordPress plugin (versions ≤ 4.4.1) is affected by a Settings Change vulnerability discovered by Johan Buenavida via Patchstack. The flaw allows a low-privileged user (e.g., subscriber) to modify settings they should not have access to, over a network with low complexity and no u...

CVE-2026-81801: Missing Authorization

Subscriber Settings Change in WP-Stateless = 4.4.1 versions...

PT-2026-89444

Subscriber Settings Change in WP-Stateless = 4.4.1 versions...

WordPress WP-Stateless plugin <= 4.4.1 - Settings Change vulnerability

Settings Change vulnerability discovered by Johan Buenavida in WordPress Plugin WP-Stateless versions = 4.4.1...

CVE-2026-84757

Unauthenticated Settings Change in WP Compress = 7.21.28 versions...

CVE-2026-84757 WordPress WP Compress plugin <= 7.21.28 - Settings Change vulnerability

Unauthenticated Settings Change in WP Compress = 7.21.28 versions...

CVE-2026-84757 WordPress WP Compress plugin <= 7.21.28 - Settings Change vulnerability

Unauthenticated Settings Change in WP Compress = 7.21.28 versions...

CVE-2026-84757

CVE-2026-84757 affects the WordPress WP Compress plugin in versions 7.21.28 and earlier . The vulnerability is an unauthenticated Settings Change , meaning an attacker with no prior access can modify plugin settings over the network without any user interaction. This yields a CVSS 3.1 base score ...

EUVD-2026-70585

Unauthenticated Settings Change in WP Compress = 7.21.28 versions...

CVE-2026-84757: Missing Authorization

Unauthenticated Settings Change in WP Compress = 7.21.28 versions...

PT-2026-85100

Unauthenticated Settings Change in WP Compress = 7.21.28 versions...

WordPress WP Compress plugin <= 7.21.28 - Settings Change vulnerability

Settings Change vulnerability discovered by Thaer.Assfour in WordPress Plugin WP Compress versions = 7.21.28...

CVE-2026-73740 Local Privilege Escalation in HPE Networking Fabric Composer

A local privilege escalation vulnerability in HPE Networking Fabric Composer could allow an authenticated privileged user on the underlying host to elevate their user privileges to those of a higher role. A successful exploit allows the attacker to change the state of certain settings of the...

EUVD-2026-69433

A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to obtain limited system information and to change the state of certain settings of a vulnerable system. Successful exploitation could allow an attacker to gain insight into internal servic...