CVE-2026-16992

The CVE-2026-16992 entry concerns the Create WordPress plugin (before 2.5.4). A REST API route does not perform an authorization check and, as a side effect, returns the requested content, enabling unauthenticated attackers to read unpublished content and to publish it publicly. The available sou...

Webkul Software Bagisto 访问控制错误漏洞

Webkul Software Bagisto is an open source e-commerce framework from Webkul Software, India. An access control error vulnerability exists in Webkul Software Bagisto versions prior to 2.3.10, which stems from an API route that remains active after installation and does not require authentication,...