Browse CVEs

HIGH 8.8 CVE-2026-14460 Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Argument Injection. This issue… Mitigation only Fix from $1,9502026-07-03 MEDIUM 5.3 CVE-2026-11398 The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to authorization bypass in all versions up to,… Mitigation only Fix from $1,6002026-07-03 MEDIUM 5.3 CVE-2026-12557 The Ninja Forms - File Uploads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.3.29. This is due t… Mitigation only Fix from $1,6002026-07-03 MEDIUM 5.3 CVE-2026-59097 Taiga before 6.10.2 contains a missing authorization vulnerability that allows unauthenticated remote attackers to create default due-date records in… Patch available Fix from $1,6002026-07-02 MEDIUM 5.3 CVE-2026-57760 Missing Authorization vulnerability in Sendcloud Sendcloud Shipping allows Exploiting Incorrectly Configured Access Control Security Levels. This is… No fix yet Fix from $1,6002026-07-02 MEDIUM 6.5 CVE-2026-57731 Contributor Broken Access Control in Flatsome <= 3.20.5 versions. Mitigation only Fix from $1,6002026-07-02 HIGH 7.1 CVE-2026-57746 Subscriber Broken Access Control in Booked <= 3.0.0 versions. Mitigation only Fix from $1,9502026-07-02 MEDIUM 5.3 CVE-2026-57750 Unauthenticated Broken Access Control in ez Form Calculator Premium <= 2.14.1.2 versions. Mitigation only Fix from $1,6002026-07-02 HIGH 8.2 CVE-2026-57688 Unauthenticated Broken Access Control in POS Entegratör <= 3.7.103 versions. Mitigation only Fix from $1,9502026-07-02 MEDIUM 6.5 CVE-2026-57669 Subscriber Broken Access Control in Advanced Contact form 7 DB <= 2.0.9 versions. Mitigation only Fix from $1,6002026-07-02 MEDIUM 6.5 CVE-2026-57353 Subscriber Broken Access Control in Link Whisper Premium <= 2.9.0 versions. Mitigation only Fix from $1,6002026-07-02 MEDIUM 6.5 CVE-2026-57355 Subscriber Broken Access Control in Classified Listing <= 5.4.2 versions. Mitigation only Fix from $1,6002026-07-02 HIGH 7.5 CVE-2026-39448 Unauthenticated Broken Access Control in NOWPayments for WooCommerce <= 1.4.0 versions. Mitigation only Fix from $1,9502026-07-02 MEDIUM 6.5 CVE-2026-27433 Unauthenticated Broken Access Control in Motors <= 5.6.80 versions. Mitigation only Fix from $1,6002026-07-02 HIGH 7.5 CVE-2025-69134 Unauthenticated Arbitrary Content Deletion in OpenAI Chatbot for WordPress – Helper <= 1.1.4 versions. Mitigation only Fix from $1,9502026-07-02 MEDIUM 5.3 CVE-2025-66076 Unauthenticated Broken Access Control in Woostify Sites Library <= 1.6.2 versions. Mitigation only Fix from $1,6002026-07-02 MEDIUM 5.3 CVE-2026-13459 The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.6… No fix yet Fix from $1,6002026-07-02 MEDIUM 5.3 CVE-2026-12122 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions … Mitigation only Fix from $1,6002026-07-02 MEDIUM 5.3 CVE-2026-12472 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and… Mitigation only Fix from $1,6002026-07-02 MEDIUM 5.3 CVE-2026-50283 Craft CMS is a content management system (CMS). Versions 5.0.0-RC1 through 5.9.20, and 4.0.0-RC1 through 4.17.13 contain an authorization issue in th… Patch available Fix from $1,6002026-07-01 HIGH 7.1 CVE-2026-50284 Craft CMS is a content management system (CMS). In versions 5.0.0-RC1 through 5.9.21 and 4.0.0-RC1 through 4.17.14, theAssetsController::actionDelete… Patch available Fix from $1,9502026-07-01 MEDIUM 5.5 CVE-2026-55628 ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-26he, the `-concatenate` op… Mitigation only Fix from $1,6002026-07-01 MEDIUM 5.3 CVE-2026-57721 Missing Authorization vulnerability in WP Reloaded ApplyOnline allows Exploiting Incorrectly Configured Access Control Security Levels. This issue a… Mitigation only Fix from $1,6002026-07-01 MEDIUM 5.3 CVE-2026-27409 Missing Authorization vulnerability in Webba Plugins Webba Booking allows Exploiting Incorrectly Configured Access Control Security Levels. This iss… Mitigation only Fix from $1,6002026-07-01 CRITICAL 9.1 CVE-2026-23537 A vulnerability has been identified in the Feast Feature Server’s `/save-document` endpoint that allows an unauthenticated remote attacker to write a… Patch available Fix from $2,3002026-07-01 MEDIUM 5.3 CVE-2026-27435 Missing Authorization vulnerability in WofficeIO Woffice allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects… Mitigation only Fix from $1,6002026-07-01 HIGH 7.5 CVE-2026-1239 The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to unauthorized access of data due to a missing aut… Mitigation only Fix from $1,9502026-07-01 HIGH 7.5 CVE-2026-13468 The Visualizer – Tables & Charts Manager with Built-in AI Generator plugin for WordPress is vulnerable to authorization bypass in all versions up to,… Mitigation only Fix from $1,9502026-07-01 MEDIUM 6.5 CVE-2026-14156 Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the rendere… Chrome 150.0.7871.47+ Fix from $1,6002026-06-30 MEDIUM 6.5 CVE-2026-58448 yudao-cloud before 2026.06 contains a broken access control vulnerability in the BPM module that allows any authenticated user to access arbitrary pr… No fix yet Fix from $1,6002026-06-30