Broken access control.

WordPress Kit (formerly ConvertKit) for WooCommerce plugin <= 2.2.0 - Broken Access Control vulnerability

• Kit (formerly ConvertKit) for WooCommerce
• Broken access control

WordPress Polylang plugin <= 3.8.7 - Sensitive Data Exposure vulnerability

• WP SYNTEX Polylang
• Broken access control

WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability

• Arraytics WP Event Solution
• Broken access control

WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.13 - Broken Access Control vulnerability

• WP ManageNinja LLC Fluent Forms Pro Add On Pack
• Broken access control

WordPress WP Dummy Content Generator plugin <= 4.0.0 - Broken Access Control vulnerability

• Deepak Anand WP Dummy Content Generator
• Broken access control

WordPress Starter Templates plugin <= 4.7.7 - Broken Access Control vulnerability

• Brainstorm Force Starter Templates
• Broken access control

Totolink A3002MU Authentication Check boa sub_40FCFC improper authorization

• Totolink A3002MU
• Privilege escalation
• Broken access control

WordPress PowerPress Podcasting plugin <= 11.17.9 - Sensitive Data Exposure vulnerability

• Blubrry Podcasting PowerPress Podcasting
• Broken access control

WordPress JS Help Desk plugin <= 4.0.0 - Insecure Direct Object References (IDOR) vulnerability

• Ahmad JS Help Desk
• Broken access control

WordPress Event Tickets plugin <= 5.30.0 - Broken Access Control vulnerability

• Liquid Web / StellarWP Event Tickets
• Broken access control

WordPress Name Directory plugin <= 1.34.2 - Arbitrary Shortcode Execution vulnerability

• Jeroen Peters Name Directory
• Broken access control

WordPress WP Mailster plugin <= 1.9.0.0 - Broken Access Control vulnerability

• WP Mailster
• Broken access control

WordPress WP Admin Audit plugin <= 1.2.17 - Broken Access Control vulnerability

• Brandtoss WP Admin Audit
• Broken access control

WordPress JS Help Desk plugin <= 4.0.0 - Insecure Direct Object References (IDOR) vulnerability

• Ahmad JS Help Desk
• Broken access control

WordPress WP VR plugin <= 9.1.3 - Broken Access Control vulnerability

• WPFunnels Team WP VR
• Broken access control

File Uploads Addon for WooCommerce 1.7.2 - 1.7.5 - Unauthenticated Customer Uploaded File Disclosure

• File Uploads Addon for WooCommerce
• Broken access control

File Uploads Addon for WooCommerce <= 1.7.6 - Unauthenticated Direct File Access

• File Uploads Addon for WooCommerce
• Broken access control

UPI QR Code Payment Gateway <= 1.4.3 - Unauthenticated Cross-Order Payment-Status Forgery

• UPI QR Code Payment Gateway
• Broken access control

Keycloak-services: keycloak-services: token introspection audience bypass via dynamic client registration

• Red Hat Build of Keycloak
• Red Hat Single Sign-On 7
• Broken access control

Jeebase UserService info updateUser dynamically-determined object attributes

• Jeebase
• Broken access control
• CWE-913

Missing authorization in MediaTek, Inc. MediaTek chipset

• MediaTek, Inc. MediaTek chipset
• Broken access control

Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control.

• Broken access control

kishor-23 food-waste-management-system Role Attribute admin.php authorization

• kishor-23 food-waste-management-system
• Broken access control

devopspolis secrets-replicator AssumeRole handler.py process_single_secret permission assignment

• devopspolis secrets-replicator
• Broken access control
• CWE-275

ZITADEL before 3.4.15 and 4.17.1 Cross-Organization Account Takeover via Passkey Enrollment

• zitadel
• Broken access control

ZITADEL before 4.17.3 Cross-Organization Authentication Method Enumeration via User Service

• zitadel
• Broken access control

Weaviate Verba generate_stream Endpoint util.py get_environment information disclosure

• Weaviate Verba
• Information disclosure
• Broken access control

User Private Files < 2.2.0 - Unauthenticated Private File Disclosure via .htaccess Rewrite Rule Bypass (Multisite)

• User Private Files
• Broken access control

Razorpay for WooCommerce < 4.8.8 - Unauthenticated Order Shipping Modification via IDOR

• Razorpay for WooCommerce
• Broken access control

Omega Solution CoinEx Crypto Support Ticket API customer information disclosure

• Omega Solution CoinEx Crypto
• Information disclosure
• Broken access control

Omega Solution CoinEx Crypto Customer Information API customer-currency authorization

• Omega Solution CoinEx Crypto
• Broken access control

mayswind ezBookkeeping 1.2.0 before 2.0.1 Privilege Escalation via Token Refresh Endpoint

• mayswind ezBookkeeping
• Broken access control

Omega Solution CoinEx Crypto Customer Profile API customer authorization

• Omega Solution CoinEx Crypto
• Broken access control

LaraDashboard before 1.4.8 Incorrect Authorization Exposes Secrets via Settings API

• laradashboard
• Broken access control

WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability

• Ultimate Member
• Broken access control

OpenAM before 16.1.3 Improper Authorization in Delegated Session-Destroy Realm Scoping

• OpenIdentityPlatform OpenAM
• Broken access control

OpenAM before 16.1.3 PKCE Enforcement Bypass via OAuth 2.0 Hybrid Flows

• OpenIdentityPlatform OpenAM
• Broken access control

MLS external commit can remove an arbitrary group member

• Legion of the Bouncy Castle Inc. BC-JAVA
• Broken access control

OpenPGP certification accepted from a subkey without certification authority

• Legion of the Bouncy Castle Inc. BC-JAVA
• Broken access control

WPCafe <= 3.0.19 - Missing Authorization to Unauthenticated Arbitrary Email Notification Flow Read/Create/Update/Delete

• arraytics WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System
• Broken access control

Nelio Content <= 4.5.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Reusable Message Deletion via 'id' Parameter

• Nelio Content – Editorial Calendar & Social Media Auto-Posting
• Broken access control

Mailchimp for WooCommerce < 6.3 - Unauthenticated Abandoned Cart Modification and Deletion

• Mailchimp for WooCommerce
• Broken access control

Photo Reviews for WooCommerce <= 1.2.30 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'wcpr_image_upload_id' Parameter

• villatheme Photo Reviews for WooCommerce
• Broken access control

Simple Membership <= 4.8.3 - Missing Authorization to Unauthenticated Account Takeover and Sensitive Information Disclosure via 'email' Parameter on Activation Endpoints

• wpinsider-1 Simple Membership
• Broken access control

Alt Text AI <= 1.10.41 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Content Modification via atai_enrich_post_content AJAX Action

• alttextai Alt Text AI – Automatically generate image alt text for SEO and accessibility
• Broken access control

Helpdesk Support Ticket System for WooCommerce <= 2.1.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Ticket Response Deletion via 'id' Parameter

• wpcodefactory Helpdesk Support Ticket System for WooCommerce
• Broken access control

Ultimate Member <= 2.13.1 - Missing Authorization to Unauthenticated Sensitive Profile Field Disclosure via Member Directory Field Privacy Bypass

• ultimatemember Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
• Broken access control

Incorrect authorization in Formbricks

• Formbricks
• Broken access control

UVdesk support-center-bundle before 1.1.3.3 IDOR via rateTicket Ticket Rating Endpoint

• uvdesk support-center-bundle
• uvdesk community-skeleton
• Broken access control

SiYuan: 17 block metadata/content endpoints in kernel/api/block.go have zero publish-access filtering, reachable by anonymous publish-mode readers

• Broken access control
• CWE-204

<0.0.0-20260804015139-bd067a4fe9b2 · fixed in 0.0.0-20260804015139-bd067a4fe9b2

Vibe-Trading FastAPI endpoints permit unauthenticated access, file upload, and an RCE chain

• Information disclosure
• Authentication bypass

>=0.1.0, <0.1.7 · fixed in 0.1.7

Trigger.dev: Cross-environment deployment cancel

• Broken access control

<4.5.6 · fixed in 4.5.6

Trigger.dev: Cross-tenant SQL injection in the TSQL query compiler (POST /api/v1/query) via unsanitized window-function name

• SQL injection
• Broken access control

<4.5.6 · fixed in 4.5.6

Trigger.dev: V1 coordinator default-secret unauth Socket.IO

• Information disclosure
• Hard-coded credentials

<4.5.4 · fixed in 4.5.4

Trigger.dev: Missing Authentication in Run Replay Action Allows Cross-Organization Task Execution (IDOR)

• Broken access control

<4.5.2 · fixed in 4.5.2

Forced browsing in Kentico Xperience

• Kentico Xperience
• Broken access control

UTMStack < 11.2.16 Missing Authorization via Command WebSocket

• UTMStack
• Broken access control

@orpc/json-schema: Prototype injection in smart coercion

• middleapi orpc
• Broken access control
• Prototype pollution

Phproject < 1.8.7 Missing Authorization via Issues REST API

• Alanaktion phproject
• Broken access control

Trigger.dev: Run replay injects a task run into an attacker-chosen environment (cross-tenant write)

• Broken access control

<4.5.2 · fixed in 4.5.2