Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

14627 matches found

NVD
NVD•added 2026/10/16 4:18 a.m.•18 views

CVE-2026-89280

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.2.1 via the 'password' parameter due to missing validation on a user controlled key...

4.3CVSS0.00213EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment•added 2026/10/16 3:38 a.m.•11 views

CVE-2026-89280 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.2.1 - Insecure Direct Object Reference to Authenticated (Custom+) Limited Account Takeover via 'password' Parameter to /wp-json/dokan/v1/customers/{id}

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.2.1 via the 'password' parameter due to missing validation on a user controlled key...

4.3CVSS5.6AI score0.00213EPSS
SaveExploits0References8
CVE
CVE•added 2026/10/16 3:38 a.m.•40 views

CVE-2026-89280

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution plugin for WordPress (versions up to and including 5.2.1 ) is vulnerable to an Insecure Direct Object Reference (IDOR) . The root cause is a lack of validation on a user-controlled key within the 'password' parameter of the /wp-js...

4.3CVSS5.6AI score0.00213EPSS
SaveExploits0References8
Cvelist
Cvelist•added 2026/10/16 3:38 a.m.•49 views

CVE-2026-89280 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.2.1 - Insecure Direct Object Reference to Authenticated (Custom+) Limited Account Takeover via 'password' Parameter to /wp-json/dokan/v1/customers/{id}

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.2.1 via the 'password' parameter due to missing validation on a user controlled key...

4.3CVSS0.00213EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/10/16 12:00 a.m.•7 views

CVE-2026-89280: Authorization Bypass Through User-Controlled Key

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.2.1 via the 'password' parameter due to missing validation on a user controlled key...

4.3CVSS5.7AI score0.00213EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies•added 2026/10/16 12:00 a.m.•18 views

PT-2026-115416

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.2.1 via the 'password' parameter due to missing validation on a user controlled key...

4.3CVSS5.7AI score0.00213EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/10/16 12:00 a.m.•9 views

CVE-2026-110380: Missing Authorization

Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.26...

5.3CVSS6AI score0.00171EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies•added 2026/10/16 12:00 a.m.•13 views

PT-2026-115588

Name of the Vulnerable Software and Affected Versions WP Event Solution versions prior to 4.1.27 Description Missing authorization allows for the exploitation of incorrectly configured access control security levels. Recommendations Update to a version newer than 4.1.26...

5.3CVSS5.8AI score0.00171EPSS
SaveExploits0References5
CNNVD
CNNVD•added 2026/10/15 4:00 p.m.•13 views

WordPress WP Event Solution Authorization Issue Vulnerability

WordPress WP Event Solution versions 4.1.26 and earlier have a vulnerability related to authorization. This vulnerability stems from the lack of proper authorization settings, which may allow attackers to exploit incorrect access control levels...

5.3CVSS5.8AI score0.00171EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux•added 2026/10/14 2:50 p.m.•18 views

Important: Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.0.17

Logging for Red Hat OpenShift - 6.0.17 Red Hat OpenShift Logging 6.0.17 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs...

9.1CVSS6.3AI score0.01584EPSS
SaveExploits5References24
NVD
NVD•added 2026/10/14 4:18 a.m.•13 views

CVE-2026-100193

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 4.1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

4.7CVSS0.00243EPSS
SaveExploits0References5
NVD
NVD•added 2026/10/13 5:17 p.m.•10 views

CVE-2026-109898

Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25...

5.3CVSS0.00171EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/10/13 4:23 p.m.•9 views

CVE-2026-109898 WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability

Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25...

5.3CVSS5.9AI score0.00171EPSS
SaveExploits0References1
CVE
CVE•added 2026/10/13 4:23 p.m.•23 views

CVE-2026-109898

The WP Event Solution plugin for WordPress (versions up to and including 4.1.25 ) is vulnerable to a Broken Access Control issue. The root cause is a Missing Authorization flaw (CWE-862), which allows for the exploitation of incorrectly configured access control security levels . This vulnerabili...

5.3CVSS5.9AI score0.00171EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/10/13 4:23 p.m.•10 views

EUVD-2026-98914

Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25...

5.3CVSS5.9AI score0.00171EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/10/13 4:23 p.m.•40 views

CVE-2026-109898 WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability

Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25...

5.3CVSS0.00171EPSS
SaveExploits0References1
Patchstack
Patchstack•added 2026/10/13 4:22 p.m.•13 views

WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Charles Vosburgh in WordPress Plugin WP Event Solution versions = 4.1.25...

5.3CVSS5.8AI score0.00171EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies•added 2026/10/13 12:00 a.m.•12 views

PT-2026-111690

Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25...

5.3CVSS5.9AI score0.00171EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/10/13 12:00 a.m.•8 views

CVE-2026-109898: Missing Authorization

Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25...

5.3CVSS5.9AI score0.00171EPSS
SaveExploits0References2
NVD
NVD•added 2026/10/11 7:17 a.m.•21 views

CVE-2026-107694

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.2.0 does not verify that the vendor a commission calculation is requested for is the requesting vendor, allowing vendors to disclose the commission rate and fixed fee the marketplace administrator...

2.7CVSS0.0023EPSS
SaveExploits0References1
Rows per page
Query Builder