Unauthenticated Broken Authentication in Email Marketing for WooCommerce by Omnisend <= 1.18.0...
CVE-2026-42668
Unauthenticated Broken Authentication in Email Marketing for WooCommerce by Omnisend <= 1.18.0 versions.
#cwe-288
共收录 218 条相关情报。
← 返回所有主题Unauthenticated Broken Authentication in RegistrationMagic <= 6.0.8.6 versions.
CVE-2026-49764
Unauthenticated Broken Authentication in RegistrationMagic <= 6.0.8.6 versions.
Unauthenticated Broken Authentication in Really Simple SSL <= 9.5.10 versions.
CVE-2026-48970
Unauthenticated Broken Authentication in Really Simple SSL <= 9.5.10 versions.
Unauthenticated Broken Authentication in Email Marketing for WooCommerce by Omnisend <= 1.18.0 versions.
CVE-2026-42668
Unauthenticated Broken Authentication in Email Marketing for WooCommerce by Omnisend <= 1.18.0 versions.
Unauthenticated Broken Authentication in CloudSecure WP Security <= 1.4.7 versions.
CVE-2026-42411
Unauthenticated Broken Authentication in CloudSecure WP Security <= 1.4.7 versions.
Subscriber Broken Authentication in WP Full Stripe Free <= 8.4.1 versions.
CVE-2026-42378
Subscriber Broken Authentication in WP Full Stripe Free <= 8.4.1 versions.
Unauthenticated Broken Authentication in Simple Cloudflare Turnstile <= 1.38.0 versions.
CVE-2026-40799
Unauthenticated Broken Authentication in Simple Cloudflare Turnstile <= 1.38.0 versions.
Subscriber Sensitive Data Exposure in WP SMS <= 7.2.1 versions.
CVE-2026-40790
Subscriber Sensitive Data Exposure in WP SMS <= 7.2.1 versions.
Subscriber Broken Authentication in AutomatorWP <= 5.6.7 versions.
CVE-2026-40785
Subscriber Broken Authentication in AutomatorWP <= 5.6.7 versions.
Unauthenticated Broken Authentication in ReviewX <= 2.3.6 versions.
CVE-2026-40781
Unauthenticated Broken Authentication in ReviewX <= 2.3.6 versions.
Subscriber Broken Authentication in FunnelKit Automations <= 3.7.3 versions.
CVE-2026-39450
Subscriber Broken Authentication in FunnelKit Automations <= 3.7.3 versions.
Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Engine Faust.Js allows Password Recovery Exploitation. This issue affects Faust.Js: from n/a throug...
CVE-2026-49062
Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Engine Faust.Js allows Password Recovery Ex
Nuxt is an open-source web development framework for Vue.js. In Nuxt versions 3.11.0 to before 3.21.6 and 4.0.0-alpha.1 to before 4.4.6 and @nuxt/nitro-server versions 3.20.0 to...
CVE-2026-47200
Nuxt is an open-source web development framework for Vue.js. In Nuxt versions 3.11.0 to before 3.21.6 and 4.0.0-alpha.1
Traefik has a StripPrefix Route-Level Auth Bypass via Path Normalization
CVE-2026-48020
## Summary There is a high severity vulnerability in Traefik's `StripPrefix` middleware that allows an unauthenticated
An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to create arbitrary a...
CVE-2026-10523
An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allow
The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the...
CVE-2026-5415
The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the same slug) plugin for Wor
The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the same slug) plugin for WordPress is vulnerable to Authentication Bypass in all vers...
CVE-2026-5415
The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the same slug) plugin for Wor
Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Swings Wallet System...
CVE-2026-42654
Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Swings Wallet System for WooCommerce allows
Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP...
CVE-2026-40780
Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows Password
Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Swings Wallet System for WooCommerce allows Password Recovery Exploitation. This issue affects Wall...
CVE-2026-42654
Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Swings Wallet System for WooCommerce allows