Browse CVEs

HIGH 7.6 CVE-2026-62186 OpenClaw versions before 2026.6.8 contain an authorization bypass vulnerability in OpenAI-compatible HTTP model overrides that allows lower-trust cal… Openclaw 2026.6.8+ Fix from $1,9502026-07-13 HIGH 7.1 CVE-2026-58410 ChurchCRM is an open-source church management system. Prior to version 7.4.0, there was an authorization flaw in the family-scoped endpoints which al… Mitigation only Fix from $1,9502026-07-13 MEDIUM 6.5 CVE-2026-58408 ChurchCRM is an open-source church management system. Prior to version 7.4.0, a low-privileged user can bypass the /admin/export UI and exfiltrate th… Mitigation only Fix from $1,6002026-07-13 CRITICAL 9.4 CVE-2026-14934 A Missing Authorization vulnerability in the repository creation functionality in Google Cloud BigQuery, Dataform and Colab Enterprise, in the versio… Mitigation only Fix from $2,3002026-07-13 MEDIUM 5.3 CVE-2026-61983 Missing Authorization vulnerability in andy_moyle Church Admin church-admin allows Exploiting Incorrectly Configured Access Control Security Levels.T… Mitigation only Fix from $1,6002026-07-13 MEDIUM 5.3 CVE-2026-61985 Missing Authorization vulnerability in magepeopleteam Car Rental Manager car-rental-manager allows Exploiting Incorrectly Configured Access Control S… Mitigation only Fix from $1,6002026-07-13 MEDIUM 6.5 CVE-2026-59523 Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Ac… Mitigation only Fix from $1,6002026-07-13 MEDIUM 5.4 CVE-2026-61958 Missing Authorization vulnerability in Saad Iqbal License Manager for WooCommerce license-manager-for-woocommerce allows Exploiting Incorrectly Confi… Mitigation only Fix from $1,6002026-07-13 MEDIUM 5.4 CVE-2026-61968 Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… No fix yet Fix from $1,6002026-07-13 MEDIUM 6.5 CVE-2026-57812 Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Ac… Mitigation only Fix from $1,6002026-07-13 MEDIUM 5.3 CVE-2026-57781 Missing Authorization vulnerability in Sovlix MeetingHub meetinghub allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… Mitigation only Fix from $1,6002026-07-13 MEDIUM 5.3 CVE-2026-57782 Missing Authorization vulnerability in PressTigers Universal Clocks universal-clocks allows Exploiting Incorrectly Configured Access Control Security… Mitigation only Fix from $1,6002026-07-13 MEDIUM 5.3 CVE-2026-57774 Missing Authorization vulnerability in vowelweb VW Food Corner vw-food-corner allows Exploiting Incorrectly Configured Access Control Security Levels… No fix yet Fix from $1,6002026-07-13 MEDIUM 5.3 CVE-2026-57776 Missing Authorization vulnerability in vowelweb VW Wedding vw-wedding allows Exploiting Incorrectly Configured Access Control Security Levels.This is… Mitigation only Fix from $1,6002026-07-13 MEDIUM 5.3 CVE-2026-57778 Missing Authorization vulnerability in wpdevart Booking calendar, Appointment Booking System booking-calendar allows Exploiting Incorrectly Configure… Mitigation only Fix from $1,6002026-07-13 MEDIUM 5.3 CVE-2026-57779 Missing Authorization vulnerability in themebeez Fascinate fascinate allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… No fix yet Fix from $1,6002026-07-13 HIGH 7.1 CVE-2026-57740 Missing Authorization vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Exploiting Incorrectly Configured Acce… Mitigation only Fix from $1,9502026-07-13 HIGH 7.5 CVE-2026-57727 Missing Authorization vulnerability in Themeum Kirki kirki allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… Mitigation only Fix from $1,9502026-07-13 HIGH 7.5 CVE-2026-57729 Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… No fix yet Fix from $1,9502026-07-13 HIGH 7.5 CVE-2026-57705 Missing Authorization vulnerability in Nexcess Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.Th… Mitigation only Fix from $1,9502026-07-13 MEDIUM 6.5 CVE-2026-57424 Missing Authorization vulnerability in knitpay Razorpay Payment Links for WooCommerce rzp-woocommerce allows Exploiting Incorrectly Configured Access… Mitigation only Fix from $1,6002026-07-13 MEDIUM 6.5 CVE-2026-57418 Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access C… Mitigation only Fix from $1,6002026-07-13 MEDIUM 6.5 CVE-2026-57419 Missing Authorization vulnerability in Fahad Mahmood Stock Locations for WooCommerce stock-locations-for-woocommerce allows Exploiting Incorrectly Co… Mitigation only Fix from $1,6002026-07-13 MEDIUM 6.5 CVE-2026-57404 Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorre… Mitigation only Fix from $1,6002026-07-13 HIGH 7.1 CVE-2026-57405 Missing Authorization vulnerability in themehunk Open Shop open-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… Mitigation only Fix from $1,9502026-07-13 MEDIUM 6.5 CVE-2026-57406 Missing Authorization vulnerability in Roxnor FundEngine wp-fundraising-donation allows Exploiting Incorrectly Configured Access Control Security Lev… Mitigation only Fix from $1,6002026-07-13 MEDIUM 6.5 CVE-2026-57408 Missing Authorization vulnerability in peachpayments Peach Payments Gateway wc-peach-payments-gateway allows Exploiting Incorrectly Configured Access… Mitigation only Fix from $1,6002026-07-13 MEDIUM 6.5 CVE-2026-57412 Missing Authorization vulnerability in Codemenschen Gift Vouchers gift-voucher allows Exploiting Incorrectly Configured Access Control Security Level… No fix yet Fix from $1,6002026-07-13 MEDIUM 6.5 CVE-2026-57395 Missing Authorization vulnerability in Themefic Tourfic tourfic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… Mitigation only Fix from $1,6002026-07-13 MEDIUM 6.5 CVE-2026-57400 Missing Authorization vulnerability in WP Swings Event Tickets Manager for WooCommerce event-tickets-manager-for-woocommerce allows Exploiting Incorr… Mitigation only Fix from $1,6002026-07-13