共收录 4228 条相关情报。
← 返回所有主题CVE-2026-44734
OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17.4.0, a Missing Authorization v
CVE-2026-57518
Pagekit CMS 1.0.18 contains a privilege escalation vulnerability that allows authenticated users with the 'user: manage
CVE-2026-12411
Broken Access Control in the devLXDInstancePatchHandler component of Canonical LXD allows an untrusted guest to mount, r
CVE-2026-57661
Subscriber Broken Access Control in WPComplete <= 2.9.5.5 versions.
CVE-2026-57660
Unauthenticated Broken Access Control in Booking and Rental Manager <= 2.7.1 versions.
CVE-2026-57654
Affiliate Broken Access Control in Affiliates Manager <= 2.9.49 versions.
CVE-2026-57649
Subscriber Broken Access Control in Shoppable Images Lite <= 1.3 versions.
CVE-2026-57648
Contributor Broken Access Control in Nelio Content <= 4.3.4 versions.
CVE-2026-57645
newsletters_subscribers Broken Access Control in Newsletters <= 4.13 versions.
CVE-2026-57640
Subscriber Broken Access Control in MasterStudy LMS <= 3.7.30 versions.
CVE-2026-57632
Subscriber Broken Access Control in Email Marketing for WooCommerce by Omnisend <= 1.19.0 versions.
CVE-2026-57622
Subscriber Broken Access Control in WPCafe <= 3.0.14 versions.
CVE-2026-57430
Contributor Broken Access Control in SEOPress PRO <= 9.1.1 versions.
CVE-2026-57324
Unauthenticated Broken Access Control in GIFT4U <= 1.0.10 versions.
CVE-2026-57323
Unauthenticated Broken Access Control in Flash & HTML5 Video <= 2.11.0 versions.
CVE-2026-56773
Teable's v2 REST API controller lacks @Permissions metadata on ORPC endpoints, allowing any authenticated user to bypass
CVE-2026-56063
Unauthenticated Broken Access Control in MailChimp Block <= 1.1.15 versions.
CVE-2026-56061
Unauthenticated Broken Access Control in Subscriptions for WooCommerce <= 1.9.5 versions.
CVE-2026-56038
Contributor Privilege Escalation in Frisbii Pay <= 1.8.2 versions.
CVE-2026-56025
Unauthenticated Broken Access Control in Paymob for WooCommerce <= 4.1.2 versions.