CVE-2026-82223 WordPress WP Event SOlution plugin <= 4.1.22 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in WP Event SOlution = 4.1.22 versions...

CVE-2026-82223

CVE-2026-82223 affects the WP Event Solution WordPress plugin in versions 4.1.22 and earlier . The vulnerability is an Unauthenticated Broken Access Control flaw, meaning a remote attacker with no prior authentication can bypass access controls. The CVSS 3.1 score is 6.5 (Medium) , with impacts o...

CVE-2026-82223: Missing Authorization

Unauthenticated Broken Access Control in WP Event SOlution = 4.1.22 versions...

Linux Distros Unpatched Vulnerability : CVE-2026-19931

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given hostname using Negotiate authentication, when the initial request is done using...

PT-2026-84694

Unauthenticated Broken Access Control in WP Event SOlution = 4.1.22 versions...

Linux Distros Unpatched Vulnerability : CVE-2026-76642

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post- mount hooks, allowing unprivileged users to execute...

EUVD-2026-69565

Incorrect Authorization CWE-863 in Kibana can lead to unauthorized modification of data via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user holding only Security Solution read access in a Kibana space could enumerate and change the state of Entity Store...

WordPress WP Event SOlution plugin <= 4.1.22 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by 20kilograma in WordPress Plugin WP Event SOlution versions = 4.1.22...

CVE-2026-72641: Incorrect Authorization

Incorrect Authorization CWE-863 in Kibana can lead to unauthorized modification of data via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user holding only Security Solution read access in a Kibana space could enumerate and change the state of Entity Store...

Linux Distros Unpatched Vulnerability : CVE-2026-65929

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - qemu - None Ubuntu Linux - Unknown description CVE-2026-65929 Note that Nessus relies on the presence of the package as reported by the vendor...

CVE-2026-16759: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Remote Code Execution limited to zero-argument function invocation in all versions up to, and including, 4.0.5 via the tutorcoursefilterajax AJAX action. This is due to missing authorization on the handler...

Linux Distros Unpatched Vulnerability : CVE-2026-81501

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - Unknown description CVE-2026-81501 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenabl...

CVE-2026-10630: Authorization Bypass Through User-Controlled Key

The WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.29 via the 'resultID' parameter due to missing validation on a user controlled key...

WordPress Eventin plugin < 4.1.21 - Contributor+ Schedule Deletion and Modification via IDOR vulnerability

Contributor+ Schedule Deletion and Modification via IDOR vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin WP Event SOlution versions 4.1.21...

WordPress Eventin plugin < 4.1.21 - Contributor+ Speaker Account Deletion via IDOR vulnerability

Contributor+ Speaker Account Deletion via IDOR vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin WP Event SOlution versions 4.1.21...

WordPress Eventin plugin < 4.1.21 - Contributor+ User Role and Meta Modification via Speaker Creation vulnerability

Contributor+ User Role and Meta Modification via Speaker Creation vulnerability discovered by Meher Sudhakar Abbireddi in WordPress Plugin WP Event SOlution versions 4.1.21...

CVE-2026-16576: Improper Access Control

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not correctly check user capabilities on some of its admin REST API routes, checking only for a WooCommerce management capability instead of the Dokan: AI Powered WooCommerce Multivendor...

CVE-2026-16577: Incorrect Authorization

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not validate a client-supplied payment amount against the vendor's actual outstanding balance when recording a reverse-withdrawal payment, allowing a vendor to credit their reverse-withdrawal...

CVE-2026-16575: Exposure of Sensitive Information to an Unauthorized Actor

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not restrict access to per-vendor commission configuration returned by one of its unauthenticated store REST endpoints, allowing any unauthenticated user to disclose a vendor's commission type...

BIT-KIBANA-2026-72661 Missing Authorization in Kibana Leading to Information Disclosure

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An internal Kibana data retrieval capability used by Elastic Defend endpoint response actions did not enforce the Security Solution and endpoint...