Vulnerability index

Browse CVEs

6,896 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Missing AuthorizationCWE-862 × clear
Openclaw HIGH 8.8
CVE-2026-62194

OpenClaw versions 2026.5.20 before 2026.6.9 contain a privilege escalation vulnerability in plugin install commands that allows lower-trust callers t…

Fix: 2026.6.9+
Fix from $1,950 2026-07-13
Openclaw HIGH 7.6
CVE-2026-62186

OpenClaw versions before 2026.6.8 contain an authorization bypass vulnerability in OpenAI-compatible HTTP model overrides that allows lower-trust cal…

Fix: 2026.6.8+
Fix from $1,950 2026-07-13
Unclassified HIGH 7.1
CVE-2026-58410

ChurchCRM is an open-source church management system. Prior to version 7.4.0, there was an authorization flaw in the family-scoped endpoints which al…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified MEDIUM 6.5
CVE-2026-58408

ChurchCRM is an open-source church management system. Prior to version 7.4.0, a low-privileged user can bypass the /admin/export UI and exfiltrate th…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified CRITICAL 9.4
CVE-2026-14934

A Missing Authorization vulnerability in the repository creation functionality in Google Cloud BigQuery, Dataform and Colab Enterprise, in the versio…

Mitigation only
Fix from $2,300 2026-07-13
Unclassified MEDIUM 5.3
CVE-2026-61983

Missing Authorization vulnerability in andy_moyle Church Admin church-admin allows Exploiting Incorrectly Configured Access Control Security Levels.T…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified MEDIUM 5.3
CVE-2026-61985

Missing Authorization vulnerability in magepeopleteam Car Rental Manager car-rental-manager allows Exploiting Incorrectly Configured Access Control S…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified MEDIUM 6.5
CVE-2026-59523

Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Ac…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified MEDIUM 5.4
CVE-2026-61958

Missing Authorization vulnerability in Saad Iqbal License Manager for WooCommerce license-manager-for-woocommerce allows Exploiting Incorrectly Confi…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified MEDIUM 5.4
CVE-2026-61968

Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af…

No fix yet
Fix from $1,600 2026-07-13
Unclassified MEDIUM 6.5
CVE-2026-57812

Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Ac…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified MEDIUM 5.3
CVE-2026-57781

Missing Authorization vulnerability in Sovlix MeetingHub meetinghub allows Exploiting Incorrectly Configured Access Control Security Levels.This issu…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified MEDIUM 5.3
CVE-2026-57782

Missing Authorization vulnerability in PressTigers Universal Clocks universal-clocks allows Exploiting Incorrectly Configured Access Control Security…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified MEDIUM 5.3
CVE-2026-57774

Missing Authorization vulnerability in vowelweb VW Food Corner vw-food-corner allows Exploiting Incorrectly Configured Access Control Security Levels…

No fix yet
Fix from $1,600 2026-07-13
Unclassified MEDIUM 5.3
CVE-2026-57776

Missing Authorization vulnerability in vowelweb VW Wedding vw-wedding allows Exploiting Incorrectly Configured Access Control Security Levels.This is…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified MEDIUM 5.3
CVE-2026-57778

Missing Authorization vulnerability in wpdevart Booking calendar, Appointment Booking System booking-calendar allows Exploiting Incorrectly Configure…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified MEDIUM 5.3
CVE-2026-57779

Missing Authorization vulnerability in themebeez Fascinate fascinate allows Exploiting Incorrectly Configured Access Control Security Levels.This iss…

No fix yet
Fix from $1,600 2026-07-13
Unclassified HIGH 7.1
CVE-2026-57740

Missing Authorization vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Exploiting Incorrectly Configured Acce…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified HIGH 7.5
CVE-2026-57727

Missing Authorization vulnerability in Themeum Kirki kirki allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified HIGH 7.5
CVE-2026-57729

Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…

No fix yet
Fix from $1,950 2026-07-13
Unclassified HIGH 7.5
CVE-2026-57705

Missing Authorization vulnerability in Nexcess Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.Th…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified MEDIUM 6.5
CVE-2026-57424

Missing Authorization vulnerability in knitpay Razorpay Payment Links for WooCommerce rzp-woocommerce allows Exploiting Incorrectly Configured Access…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified MEDIUM 6.5
CVE-2026-57418

Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access C…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified MEDIUM 6.5
CVE-2026-57419

Missing Authorization vulnerability in Fahad Mahmood Stock Locations for WooCommerce stock-locations-for-woocommerce allows Exploiting Incorrectly Co…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified MEDIUM 6.5
CVE-2026-57404

Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorre…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified HIGH 7.1
CVE-2026-57405

Missing Authorization vulnerability in themehunk Open Shop open-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This iss…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified MEDIUM 6.5
CVE-2026-57406

Missing Authorization vulnerability in Roxnor FundEngine wp-fundraising-donation allows Exploiting Incorrectly Configured Access Control Security Lev…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified MEDIUM 6.5
CVE-2026-57408

Missing Authorization vulnerability in peachpayments Peach Payments Gateway wc-peach-payments-gateway allows Exploiting Incorrectly Configured Access…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified MEDIUM 6.5
CVE-2026-57412

Missing Authorization vulnerability in Codemenschen Gift Vouchers gift-voucher allows Exploiting Incorrectly Configured Access Control Security Level…

No fix yet
Fix from $1,600 2026-07-13
Unclassified MEDIUM 6.5
CVE-2026-57395

Missing Authorization vulnerability in Themefic Tourfic tourfic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af…

Mitigation only
Fix from $1,600 2026-07-13