Total
11506 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-84910 | 2026-10-22 | N/A | 4.2 MEDIUM | ||
| Missing Authorization vulnerability in Drupal Advanced Search allows Forceful Browsing. This issue affects Advanced Search versions: from 0.0.0 to 2.4.5. | |||||
| CVE-2026-84912 | 2026-10-22 | N/A | 4.6 MEDIUM | ||
| Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.3.13, from 1.4.0 to 1.4.8. | |||||
| CVE-2026-96380 | 2026-10-22 | N/A | 6.5 MEDIUM | ||
| Missing Authorization vulnerability in Drupal CSS Usage Analyzer allows Forceful Browsing. This issue affects CSS Usage Analyzer versions: from 1.0.0 to 1.0.2. | |||||
| CVE-2026-87954 | 2026-10-22 | N/A | 4.3 MEDIUM | ||
| Missing Authorization vulnerability in Drupal Taxonomy Term Glossary allows Forceful Browsing. This issue affects Taxonomy Term Glossary versions: from 0.0.0 to 4.6.0. | |||||
| CVE-2026-87955 | 2026-10-22 | N/A | 4.3 MEDIUM | ||
| Missing Authorization vulnerability in Drupal Ultimate Table Field allows Forceful Browsing. This issue affects Ultimate Table Field versions: from 0.0.0 to 1.1.1, from 2.0.0 to 2.0.1. | |||||
| CVE-2026-66589 | 2026-10-22 | N/A | 5.4 MEDIUM | ||
| Missing Authorization vulnerability in Kings Plugins B2BKing allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects B2BKing: from n/a through 5.2.30. | |||||
| CVE-2026-13173 | 2026-10-22 | N/A | 2.7 LOW | ||
| The Eventin WordPress plugin before 4.1.21 does not verify the current user's permission to edit other users before assigning roles and updating user metadata during speaker creation, allowing users with contributor-level access and above to modify other users' roles and metadata. | |||||
| CVE-2026-109931 | 2026-10-22 | N/A | 3.7 LOW | ||
| The Infility Global WordPress plugin before 2.16.25 does not perform any authorisation or nonce check on an AJAX action available to unauthenticated users, allowing any visitor to overwrite a machine-translation configuration value belonging to a companion Infility Global WordPress plugin before 2.16.25. | |||||
| CVE-2026-110010 | 2026-10-22 | N/A | 4.8 MEDIUM | ||
| The MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.3 does not perform any capability or authentication check before allowing an unauthenticated request to re-run a legacy data migration, letting anyone revert a custom post type or taxonomy definition on sites upgraded from a pre-2.0 release back to its pre-upgrade state. This discards configuration changes an administrator made after upgrading and, where those changes had restricted a definition's visibility, silently re-exposes the definition and its content to anonymous visitors. | |||||
| CVE-2026-112842 | 2026-10-22 | N/A | 6.5 MEDIUM | ||
| Missing Authorization vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Member Subscriptions: from n/a through 3.1.2. | |||||
| CVE-2026-114696 | 2026-10-22 | N/A | 5.3 MEDIUM | ||
| Missing Authorization vulnerability in miniOrange Page Restriction WordPress (WP) page-and-post-restriction allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Page Restriction WordPress (WP): from n/a through 1.6.0. | |||||
| CVE-2026-112826 | 2026-10-22 | N/A | 5.3 MEDIUM | ||
| Missing Authorization vulnerability in eLightUp Falcon – WordPress Optimizations & Tweaks falcon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Falcon – WordPress Optimizations & Tweaks: from n/a through 2.12.0. | |||||
| CVE-2026-110893 | 2026-10-22 | N/A | 5.3 MEDIUM | ||
| Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureDash: from n/a through 1.12.2. | |||||
| CVE-2026-114175 | 2026-10-22 | N/A | 5.4 MEDIUM | ||
| Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eRoom: from n/a through 1.7.1. | |||||
| CVE-2026-114180 | 2026-10-22 | N/A | 5.3 MEDIUM | ||
| Missing Authorization vulnerability in Wpmet Metform metform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Metform: from n/a through 4.3.2. | |||||
| CVE-2026-111842 | 2026-10-22 | N/A | 5.3 MEDIUM | ||
| Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through 3.7.5. | |||||
| CVE-2026-112218 | 2026-10-22 | N/A | 5.3 MEDIUM | ||
| Missing Authorization vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from n/a through 1.2.1. | |||||
| CVE-2026-114699 | 2026-10-22 | N/A | 5.3 MEDIUM | ||
| Missing Authorization vulnerability in yoomoney ЮKassa для WooCommerce yookassa allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ЮKassa для WooCommerce: from n/a through 2.17.3. | |||||
| CVE-2026-112312 | 2026-10-22 | N/A | 7.5 HIGH | ||
| Missing Authorization vulnerability in ACF Extended ACF Extended acf-extended allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ACF Extended: from n/a through 0.9.2.7. | |||||
| CVE-2026-110894 | 2026-10-22 | N/A | 5.3 MEDIUM | ||
| Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureDash: from n/a through 1.12.2. | |||||