PraisonAI Platform (praisonai-platform) before 0.1.9 fails to enforce owner/admin authorization...
CVE-2026-61442
PraisonAI Platform (praisonai-platform) before 0.1.9 fails to enforce owner/admin authorization on the PATCH routes for
#cwe-862
共收录 4228 条相关情报。
← 返回所有主题PraisonAI Platform (praisonai-platform) before 0.1.9 fails to enforce owner/admin authorization on the PATCH routes for projects, issues, and agents, which only require workspac...
CVE-2026-61442
CVE-2026-61442 影响 PraisonAI Platform 0.1.9 之前的版本。该平台在项目、问题和代理的 PATCH 路由上未正确实施所有者/管理员授权检查，仅要求用户具备工作空间成员角色即可发起修改请求。这意味着任意工
PraisonAI Platform before 0.1.9 Authorization Bypass via PATCH
CVE-2026-61442
PraisonAI Platform (praisonai-platform) before 0.1.9 fails to enforce owner/admin authorization on the PATCH routes for
The WCFM – Frontend Manager for WooCommerce plugin for WordPress is vulnerable to authorization...
CVE-2026-12994
The WCFM – Frontend Manager for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions u
The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to...
CVE-2026-9017
The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to authorization bypass in all ve
The WP Easy Pay – Payment and Donation form Builder for Square plugin for WordPress is vulnerable...
CVE-2026-12738
The WP Easy Pay – Payment and Donation form Builder for Square plugin for WordPress is vulnerable to authorization bypas
The Wallet for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all...
CVE-2026-12103
The Wallet for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includi
The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 9.2.2. This is due to the pl...
CVE-2026-9017
The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to authorization bypass in all ve
The WCFM – Frontend Manager for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.7.27. This is due to the plugin no...
CVE-2026-12994
The WCFM – Frontend Manager for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions u
The WP Easy Pay – Payment and Donation form Builder for Square plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.0. This is du...
CVE-2026-12738
The WP Easy Pay – Payment and Donation form Builder for Square plugin for WordPress is vulnerable to authorization bypas
The Wallet for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.6.4. This is due to the plugin not properly verifyi...
CVE-2026-12103
The Wallet for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includi
The ThriveDesk – Live Chat, AI Chatbot, Helpdesk & Knowledge Base plugin for WordPress is...
CVE-2026-1832
The ThriveDesk – Live Chat, AI Chatbot, Helpdesk & Knowledge Base plugin for WordPress is vulnerable to unauthorized cac
The SurfLink - Ultimate Link Manager plugin for WordPress is vulnerable to unauthorized data...
CVE-2026-3552
The SurfLink - Ultimate Link Manager plugin for WordPress is vulnerable to unauthorized data modification due to a missi
The Affilia – Affiliate Program & Referral Tracking for WordPress plugin for WordPress is...
CVE-2026-7559
The Affilia – Affiliate Program & Referral Tracking for WordPress plugin for WordPress is vulnerable to unauthorized acc
The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Missing...
CVE-2026-6803
The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Missing Authorization in all versions
The Solace Extra plugin for WordPress is vulnerable to authorization bypass in all versions up to...
CVE-2026-13250
The Solace Extra plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.3.
The Notification for Telegram plugin for WordPress is vulnerable to authorization bypass in all...
CVE-2026-7620
The Notification for Telegram plugin for WordPress is vulnerable to authorization bypass in all versions up to, and incl
The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to authorization...
CVE-2026-6804
The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to authorization bypass in all versions
The Points and Rewards for WooCommerce plugin for WordPress is vulnerable to authorization bypass...
CVE-2026-10628
The Points and Rewards for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to,
The MyParcel plugin for WordPress is vulnerable to authorization bypass in all versions up to,...
CVE-2026-8678
The MyParcel plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.25.1. Th