CVE-2026-16992

The Create WordPress plugin by Mediavine, in versions prior to 2.5.4 , is vulnerable to an authorization bypass. A specific REST API route fails to perform adequate authorization checks before returning content. Furthermore, accessing this route triggers a side effect that publishes the requested...

Webkul Software Bagisto 访问控制错误漏洞

Webkul Software Bagisto is an open source e-commerce framework from Webkul Software, India. An access control error vulnerability exists in Webkul Software Bagisto versions prior to 2.3.10, which stems from an API route that remains active after installation and does not require authentication,...