Total
11535 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-105421 | 2026-10-06 | N/A | 5.3 MEDIUM | ||
| Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) for WooCommerce convertkit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kit (formerly ConvertKit) for WooCommerce: from n/a through 2.2.0. | |||||
| CVE-2026-42637 | 2026-10-06 | N/A | 6.5 MEDIUM | ||
| Unauthenticated Settings Change in PayPlug for WooCommerce (Official) <= 3.1.0 versions. | |||||
| CVE-2026-102383 | 2026-10-06 | N/A | 6.5 MEDIUM | ||
| Missing Authorization vulnerability in VillaTheme Lookzy woo-lookbook allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lookzy: from n/a through 1.1.14. | |||||
| CVE-2026-39721 | 2026-10-06 | N/A | 5.4 MEDIUM | ||
| Missing Authorization vulnerability in Brainstorm Force Starter Templates astra-sites allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Starter Templates: from n/a through 4.7.7. | |||||
| CVE-2026-39763 | 2026-10-06 | N/A | 4.3 MEDIUM | ||
| Missing Authorization vulnerability in Deepak Anand WP Dummy Content Generator wp-dummy-content-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Dummy Content Generator: from n/a through 4.0.0. | |||||
| CVE-2026-104397 | 2026-10-06 | N/A | 5.3 MEDIUM | ||
| Missing Authorization vulnerability in Jeroen Peters Name Directory name-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Name Directory: from n/a through 1.34.2. | |||||
| CVE-2026-104406 | 2026-10-06 | N/A | 7.3 HIGH | ||
| Unauthenticated Broken Access Control in picu <= 3.10.1 versions. | |||||
| CVE-2026-104388 | 2026-10-06 | N/A | 5.3 MEDIUM | ||
| Missing Authorization vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Retrieve Embedded Sensitive Data.This issue affects PowerPress Podcasting: from n/a through 11.17.9. | |||||
| CVE-2026-105062 | 2026-10-06 | N/A | 4.3 MEDIUM | ||
| Missing Authorization vulnerability in Brandtoss WP Admin Audit wp-admin-audit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Admin Audit: from n/a through 1.2.17. | |||||
| CVE-2026-39794 | 2026-10-06 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API <= 1.6.3 versions. | |||||
| CVE-2026-39783 | 2026-10-06 | N/A | 4.3 MEDIUM | ||
| Missing Authorization vulnerability in WP SYNTEX Polylang polylang allows Retrieve Embedded Sensitive Data.This issue affects Polylang: from n/a through 3.8.7. | |||||
| CVE-2026-102915 | 2026-10-06 | N/A | 8.5 HIGH | ||
| Subscriber Broken Access Control in WPO365 <= 44.1 versions. | |||||
| CVE-2026-39762 | 2026-10-06 | N/A | 6.5 MEDIUM | ||
| Missing Authorization vulnerability in Patterns In The Cloud Autoship Cloud for WooCommerce Subscription Products autoship-cloud allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Autoship Cloud for WooCommerce Subscription Products: from n/a through 2.17.1. | |||||
| CVE-2026-39796 | 2026-10-06 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in Advanced Posts Listing – Show Post List Easily <= 1.0.8 versions. | |||||
| CVE-2026-39789 | 2026-10-06 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in Fluent Affiliate Pro <= 1.6.4 versions. | |||||
| CVE-2026-105055 | 2026-10-06 | N/A | 5.3 MEDIUM | ||
| Missing Authorization vulnerability in WP Mailster WP Mailster wp-mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: from n/a through 1.9.0.0. | |||||
| CVE-2026-25433 | 2026-10-06 | N/A | 7.1 HIGH | ||
| Subscriber Broken Access Control in WP2LEADS <= 3.5.7 versions. | |||||
| CVE-2026-103337 | 2026-10-06 | N/A | 6.5 MEDIUM | ||
| Missing Authorization vulnerability in Kirillbdev WC Ukraine Shipping wc-ukr-shipping allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WC Ukraine Shipping: from n/a through 1.23.2. | |||||
| CVE-2026-39787 | 2026-10-06 | N/A | 6.5 MEDIUM | ||
| Unauthenticated Broken Access Control in 10Web Social Photo Feed <= 1.4.35 versions. | |||||
| CVE-2026-104675 | 2026-10-06 | N/A | 4.3 MEDIUM | ||
| Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0. | |||||