Broken access control.

WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability

• WP Chill Strong Testimonials
• Broken access control

WordPress Ninja Forms Signature Contract Add-On plugin <= 3.2.5 - Broken Access Control vulnerability

• WP E-Signature Ninja Forms Signature Contract Add-On
• Broken access control

WordPress WP EasyPay plugin <= 4.5.4 - Broken Access Control vulnerability

• WPExperts WP EasyPay
• Broken access control

WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.5.3 - Insecure Direct Object References (IDOR) vulnerability

• ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes
• Broken access control

WordPress Simply Schedule Appointments plugin <= 1.6.12.35 - Insecure Direct Object References (IDOR) vulnerability

• NSquared Simply Schedule Appointments
• Broken access control

WordPress AI Engine plugin <= 3.8.3 - Broken Access Control vulnerability

• Meow Apps AI Engine
• Broken access control

WordPress WordLift plugin <= 3.54.15 - Broken Access Control vulnerability

• WordLift
• Broken access control

WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability

• WPExperts APIExperts Square for WooCommerce
• Broken access control

WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability

• WP Chill Strong Testimonials
• Broken access control

AsyncHttpClient: Resumable download index store is created world-readable and follows a planted symlink

• AsyncHttpClient async-http-client
• Broken access control
• CWE-61

Discourse ActivityPub: Fix inbound actor validation and apply outbound request SSRF hardening

• discourse-activity-pub
• Broken access control
• CWE-345

Lychee: Webshop checkout lets the client override the payment `amount` sent to the gateway via malicious crafted POST request

• Lychee
• Broken access control
• CWE-20

Lychee: Album password bypass in ZIP downloads

• Lychee
• Broken access control

Lychee: unauthenticated photo starring reveals existence of private photos when photos_star_visibility=anonymous

• Lychee
• Broken access control

Nexus Repository 3 - Privilege Escalation via Role Management

• Sonatype Nexus Repository 3
• Broken access control

Nexus Repository 3 - Missing Authorization on NuGet Symbol Package Upload

• Sonatype Nexus Repository 3
• Broken access control

Missing authorization in JetBrains YouTrack

• JetBrains YouTrack
• Broken access control

OPNsense: Direct comma-separated user privileges bypass OPNsense MVC read-only write protection

• opnsense core
• Broken access control

EspoCRM: Access control bypass in Mass Update letting regular user with Mass Update permission read any attachment

• espocrm
• Broken access control

EspoCRM: Mass email template renderer leaks restricted record fields

• espocrm
• Broken access control

EspoCRM: IDOR in Import exportErrors Endpoint Leaks CSV Data of Other Users

• espocrm
• Broken access control

EspoCRM: Target list Opt-Out actions allows opting out record without access Target List and access to record

• espocrm
• Broken access control

EspoCRM: Portal User ACL Bypass Exposes Internal Stream Notes

• espocrm
• Broken access control

Viewer role can create, modify and delete Loki alerting rules

• Grafana Enterprise
• Grafana OSS
• Broken access control

WordPress Webba Booking plugin <= 6.5.2 - Insecure Direct Object References (IDOR) vulnerability

• Webba Plugins Webba Booking
• Broken access control

Improper privilege management in Eclipse Foundation Eclipse Connected Services Platform

• Eclipse Foundation Eclipse Connected Services Platform
• Privilege escalation
• Broken access control

WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability

• ThemeGrill User Registration
• Broken access control

Duplicate http-method-omission constraint mappings can remove servlet authorization constraints

• Broken access control

Published by the maintainers · not yet reviewed by GitHub

>=12.0.0, <=12.0.38 || >=12.1.0, <=12.1.11 · fixed in 12.0.39, 12.1.12

Constraint bypass when using http method name that is a substring of a http-method-omission

• Broken access control

Published by the maintainers · not yet reviewed by GitHub

>=12.0.0, <=12.0.38 || >=12.1.0, <=12.1.11 · fixed in 12.0.39, 12.1.12

Jetty suppresses ServletSecurity annotations for all servlet mappings when only one mapping is constrained by a descriptor

• Broken access control

Published by the maintainers · not yet reviewed by GitHub

>=12.1.0, <=12.1.11 || >=12.0.0, <=12.0.38 · fixed in 12.0.39, 12.1.12

Jetty EthereumAuthenticator unanchored login-path matching bypasses authentication and role constraints

• Authentication bypass
• Broken access control

Published by the maintainers · not yet reviewed by GitHub

>=12.1.0, <=12.1.12 · fixed in 12.1.13

**Privilege Escalation** World-writable crontab path monitored and executed by root-owned process

• QNAP Systems Inc. Notes Station 3
• Broken access control

Access Code Forgery in Video Station leading to unauthorized media access

• QNAP Systems Inc. Video Station
• Broken access control

ds-move-files.sh is writable and executed as root

• QNAP Systems Inc. Download Station
• Broken access control

sdbootutil: world-readable debug log

• SUSE Linux Enterprise Server 16.1
• SUSE Linux Enterprise Server for NVIDIA 16.1
• Broken access control

Social Media Auto Post & Scheduler <= 9.1.4 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure

• pr-gateway Blog2Social: Social Media Auto Post & Scheduler
• Broken access control

Elementor Website Builder <= 4.2.3 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'is_public' and 'keys_conversion_map' Parameters

• elemntor Elementor Website Builder – more than just a page builder
• Broken access control

Tutor LMS < 4.1.1 - Unauthenticated Tutor Page Force-Publish and Content Overwrite

• Tutor LMS
• Broken access control

Spin Wheel < 2.2.1 - Unauthenticated Coupon Code Disclosure via Forged Spin Result

• Spin Wheel
• Broken access control

Easy HTTPS Redirection (SSL) < 2.0.2 - Subscriber+ Scan Result Disclosure and Site-Wide URL Rewrite

• Easy HTTPS Redirection (SSL)
• Broken access control

eaSYNC < 1.3.31 - Unauthenticated Cancellation Request Creation and Email Template Update

• eaSYNC Booking
• Broken access control

Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.9.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Media Deletion via Checkout File Field Attachment ID

• quadlayers Checkout Field Manager (Checkout Manager) for WooCommerce
• Broken access control

IntentKit 2.6.3 Executor Tool Authorization Bypass via ToolNode

• crestalnetwork intentkit
• Broken access control

An issue in Justson agentweb-core v5.1.6-androidx and earlier allows a local attacker to obtain sensitive information and launch non-exported host application components via incorrect access control…

• Broken access control

ELADMIN v2.7 and earlier contains an improper access control vulnerability in the user-management endpoint PUT /api/users/resetPwd of me.zhengjie.modules.system.rest.UserController.

• Broken access control

Heym 0.0.55 before 0.0.121 Credential Theft via error_workflow_id Field

• heym
• Broken access control

Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset

• renovate
• mend renovate-ce
• Broken access control

n8n before 1.123.83 Authorization Bypass via Execute Sub-workflow Inline JSON

• n8n
• Broken access control

n8n before 2.41.4 and 2.42.1 Cross-Project Agent Ownership Transfer via Agents Create Endpoint

• n8n
• Broken access control

n8n before 2.41.4 and 2.42.1 Credential Check Bypass via Agent Node Parameters

• n8n
• Broken access control

n8n before 1.123.83 Credential Authorization Bypass via Nested Inline Sub-Workflows

• n8n
• Broken access control

n8n before 2.41.4 and 2.42.0 Authorization Bypass in Agent Chat Resume Tool Approval

• n8n
• Broken access control

Improper Authorization in TP-Link Omada Controller TLS Certificate and Private Key Management API

• TP-Link Systems Inc. Omada Software Controller
• Broken access control

Insufficient Authorization and User Boundary Validation in Omada Controller MSP

• TP-Link System Inc. Omada Software Controller (Windows)
• Broken access control

itsmeravitejak Online-Examination-System dbtables.sql information disclosure

• itsmeravitejak Online-Examination-System
• Information disclosure
• Broken access control

FileRise renameFolder omits destination-parent authorization

• error311 FileRise
• Broken access control

FileRise: Unauthenticated File Overwrite Through Upload-Enabled Folder Shares

• error311 FileRise
• Broken access control

Incorrect authorization in SonicWall Network Security Manager (NSM)

• SonicWall Network Security Manager (NSM)
• Broken access control

OpenAEV has unauthenticated access and missing object-level authorization on player lessons API

• openaev
• Authentication bypass
• Broken access control

Plane: Cross-Project Page Content Disclosure via PageVersionEndpoint Missing Project Scope

• plane
• Broken access control