Subscriber Settings Change in uListing <= 2.2.0 versions.
CVE-2026-62033
Subscriber Settings Change in uListing <= 2.2.0 versions.
#cwe-862
共收录 3939 条相关情报。
← 返回所有主题Unauthenticated Broken Access Control in DK <= 3.2.1 versions.
CVE-2026-42706
Unauthenticated Broken Access Control in DK <= 3.2.1 versions.
Unauthenticated Broken Access Control in Grand News <= 3.4 versions.
CVE-2026-42705
Unauthenticated Broken Access Control in Grand News <= 3.4 versions.
Subscriber Broken Access Control in Jetpack VideoPress <= 3.6 versions.
CVE-2026-40808
Subscriber Broken Access Control in Jetpack VideoPress <= 3.6 versions.
Subscriber Settings Change in Pubjet | پابجت <= 5.4.8 versions.
CVE-2026-40802
Subscriber Settings Change in Pubjet | پابجت <= 5.4.8 versions.
Subscriber Broken Access Control in Wordable <= 8.2.10 versions.
CVE-2026-40801
Subscriber Broken Access Control in Wordable <= 8.2.10 versions.
Subscriber Broken Access Control in WPSection <= 1.5.1 versions.
CVE-2026-40777
Subscriber Broken Access Control in WPSection <= 1.5.1 versions.
Missing Authorization vulnerability in VillaTheme ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce woo-alidropship allows Exploiting Incorrectly Configured Acce...
CVE-2026-103685
Missing Authorization vulnerability in VillaTheme ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce woo-
Missing Authorization vulnerability in Web Impian Bayarcash WooCommerce bayarcash-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects B...
CVE-2026-106609
Missing Authorization vulnerability in Web Impian Bayarcash WooCommerce bayarcash-wc allows Exploiting Incorrectly Confi
Missing Authorization vulnerability in VillaTheme GIFT4U gift4u-gift-cards-all-in-one-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue ...
CVE-2026-103357
Missing Authorization vulnerability in VillaTheme GIFT4U gift4u-gift-cards-all-in-one-for-woo allows Exploiting Incorrec
TencentCloud Octop through 1.0.2b6 contains a missing authorization vulnerability that allows authenticated low-privileged users to read stored provider API keys via GET /api/pr...
CVE-2026-108581
TencentCloud Octop through 1.0.2b6 contains a missing authorization vulnerability that allows authenticated low-privileg
Octop through 1.0.2b6 Missing Authorization Exposes Provider API Keys via /api/providers
CVE-2026-108581
TencentCloud Octop through 1.0.2b6 contains a missing authorization vulnerability that allows authenticated low-privileg
Immich through 3.3.1 contains a missing authorization vulnerability in the partner synchronization stream that allows authenticated partners to read Locked Folder asset metadata...
CVE-2026-108165
Immich through 3.3.1 contains a missing authorization vulnerability in the partner synchronization stream that allows au
Missing Authorization vulnerability in StylemixThemes Motors motors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors: from n/a t...
CVE-2026-93950
Missing Authorization vulnerability in StylemixThemes Motors motors allows Exploiting Incorrectly Configured Access Cont
The AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and i...
CVE-2026-104728
The AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI plugin for WordPress is vulner
The WP File Download plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.3.9. This is due to the plugin not properly verifying tha...
CVE-2026-94538
The WP File Download plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.
The CV Builder – Professional Resume Builder SaaS plugin for WordPress is vulnerable to unauthorized arbitrary file upload due to a missing capability check on the 'wp_save_sign...
CVE-2026-3717
The CV Builder – Professional Resume Builder SaaS plugin for WordPress is vulnerable to unauthorized arbitrary file uplo
The Fluent Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.2.5. This is due to the plugin not properly verifying that a ...
CVE-2026-15178
The Fluent Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.2.5.
The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization or request-validation checks on one of its AJAX actions, allowin...
CVE-2026-105989
The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization or requ
The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.4.89. This is due ...
CVE-2026-104742
The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass i