Subscriber Broken Access Control in Delete All Comments of wordpress <= 7.1 versions.
CVE-2026-105059
Subscriber Broken Access Control in Delete All Comments of wordpress <= 7.1 versions.
#cwe-862
共收录 3962 条相关情报。
← 返回所有主题Unauthenticated Broken Access Control in picu <= 3.10.1 versions.
CVE-2026-104406
Unauthenticated Broken Access Control in picu <= 3.10.1 versions.
Unauthenticated Broken Access Control in PowerPress Podcasting <= 11.17.9 versions.
CVE-2026-104387
Unauthenticated Broken Access Control in PowerPress Podcasting <= 11.17.9 versions.
Subscriber Broken Access Control in WPO365 <= 44.1 versions.
CVE-2026-102915
Subscriber Broken Access Control in WPO365 <= 44.1 versions.
The Fast Courier WordPress plugin through 5.2.3 does not restrict an unauthenticated REST route that writes order fulfillment data, allowing unauthenticated attackers to overwr...
CVE-2026-89289
The Fast Courier WordPress plugin through 5.2.3 does not restrict an unauthenticated REST route that writes order fulfi
Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
CVE-2026-25267
Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
Contributor Broken Access Control in IATO MCP <= 1.11.0 versions.
CVE-2026-32582
Contributor Broken Access Control in IATO MCP <= 1.11.0 versions.
Unauthenticated Broken Access Control in FluentBooking Pro < 2.5.0 versions.
CVE-2026-105072
Unauthenticated Broken Access Control in FluentBooking Pro < 2.5.0 versions.
Unauthenticated Broken Access Control in Morning for WooCommerce <= 2.4.1 versions.
CVE-2026-39723
Unauthenticated Broken Access Control in Morning for WooCommerce <= 2.4.1 versions.
Contributor Broken Access Control in WDS MCP Content Manager <= 3.10.4 versions.
CVE-2026-39599
Contributor Broken Access Control in WDS MCP Content Manager <= 3.10.4 versions.
Unauthenticated Broken Access Control in Fluent Affiliate Pro <= 1.6.4 versions.
CVE-2026-39789
Unauthenticated Broken Access Control in Fluent Affiliate Pro <= 1.6.4 versions.
Unauthenticated Broken Access Control in Fluent Affiliate Pro <= 1.6.4 versions.
CVE-2026-39789
Unauthenticated Broken Access Control in Fluent Affiliate Pro <= 1.6.4 versions.
Unauthenticated Broken Access Control in Morning for WooCommerce <= 2.4.1 versions.
CVE-2026-39723
Unauthenticated Broken Access Control in Morning for WooCommerce <= 2.4.1 versions.
Contributor Broken Access Control in WDS MCP Content Manager <= 3.10.4 versions.
CVE-2026-39599
Contributor Broken Access Control in WDS MCP Content Manager <= 3.10.4 versions.
Contributor Broken Access Control in IATO MCP <= 1.11.0 versions.
CVE-2026-32582
Contributor Broken Access Control in IATO MCP <= 1.11.0 versions.
Unauthenticated Broken Access Control in FluentBooking Pro < 2.5.0 versions.
CVE-2026-105072
Unauthenticated Broken Access Control in FluentBooking Pro < 2.5.0 versions.
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Executing a manipulation can lead to cross-site request forgery...
CVE-2026-105706
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Execut
OpenClaw: Channel read actions could skip target allowlists
### Summary Channel read actions could skip target allowlists. In affected versions, explicit read targets in Microsoft
Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secre...
CVE-2026-103433
Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake defin
Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.0.0 until 1.10.1, Langflow did not verify flow ownership in the deprecated POST /api/v1/bui...
CVE-2026-105698
Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.0.0 until 1.10.1, Langflow did not