Broken access control.

JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate deleteBatch Endpoint

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate Edit Endpoint

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate/add Endpoint

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via /airag/extData/deleteBatch

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via /airag/extData/delete

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via /airag/extData/exportXls

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via /airag/app/release Endpoint

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via /airag/word/deleteBatch

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via /airag/word/delete Endpoint

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via /airag/word/edit Endpoint

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 IDOR via /airag/voice/listByUser userId Parameter

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 IDOR via deleteVoiceRecord userId Parameter

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 IDOR via deleteVideoRecord userId Parameter

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via /airag/ocr/deleteById

• JeecgBoot
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via /airag/ocr/edit Endpoint

• JeecgBoot
• Broken access control

WordPress ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce plugin <= 2.2.4 - Broken Access Control vulnerability

• VillaTheme ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce
• Broken access control

Tabularis through 0.27.0 Read-Only Bypass via MCP run_query SELECT Classification

• tabularis
• Broken access control

WordPress Forminator plugin <= 1.57.3 - Arbitrary Content Deletion vulnerability

• WPMU DEV Forminator
• Broken access control

WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.13.1 - Broken Access Control vulnerability

• Dmitry V. Barcode Scanner with Inventory & Order Manager
• Broken access control

WordPress AWS S3 for WordPress Plugin – Upcasted plugin <= 3.1.0 - Broken Access Control vulnerability

• AWS S3 for WordPress Plugin – Upcasted
• Broken access control

WordPress uListing plugin <= 2.2.0 - Settings Change vulnerability

• Stylemix uListing
• Broken access control

WordPress DK theme <= 3.2.1 - Broken Access Control vulnerability

• ThemeGoods DK
• Broken access control

WordPress Grand News theme <= 3.4 - Broken Access Control vulnerability

• ThemeGoods Grand News
• Broken access control

WordPress Jetpack VideoPress plugin <= 3.6 - Broken Access Control vulnerability

• Automattic Jetpack VideoPress
• Broken access control

WordPress Pubjet | پابجت plugin <= 5.4.8 - Settings Change vulnerability

• Pubjet | پابجت
• Broken access control

WordPress Wordable plugin <= 8.2.10 - Broken Access Control vulnerability

• Wordable
• Broken access control

WordPress WPSection plugin <= 1.5.1 - Broken Access Control vulnerability

• Rashid WPSection
• Broken access control

OpenLIT 2.1.0 Authorization Bypass via x-openlit-project-id Header

• openlit
• Broken access control

Phi 0.3.0 through 0.28.4 Permission Bypass via agent_spawn Workdir

• pulseaiclub phi
• Broken access control

WordPress GIFT4U plugin <= 1.1.3 - Broken Access Control vulnerability

• VillaTheme GIFT4U
• Broken access control

WordPress Bayarcash WooCommerce plugin <= 4.4.2 - Broken Access Control vulnerability

• Web Impian Bayarcash WooCommerce
• Broken access control

1MCP Agent 0.20.0 through 0.39.0 OAuth Tag-Scope Bypass via Negated Tag Filter

• 1mcp-app @1mcp/agent
• Broken access control

GenOffice through 0.11.505 Insecure Permissions in HTTP MCP Server File Store

• genspark-ai GenOffice
• Broken access control

Octop through 1.0.2b6 Missing Authorization Exposes Provider API Keys via /api/providers

• TencentCloud Octop
• Broken access control

SkillHub before 0.2.22 Account Takeover via Account Merge Flow

• iflytek skillhub
• Broken access control

AstronRPA through 1.1.6 Cross-Tenant Shared Variable Disclosure via get-batch-shared-var

• iflytek astron-rpa
• Broken access control

Strapi 5.47.0 through 5.57.0 Improper Authorization via Admin API Token Field Permissions

• strapi
• Broken access control

Immich through 3.3.1 Missing Authorization in Partner Sync Exposes Locked Folder Metadata

• immich
• Broken access control

Open Source Social Network (OSSN) through 10.1 IDOR via Message Attachment Route

• opensource-socialnetwork
• Broken access control

WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels <= 5.0.2 - Insecure Direct Object Reference to Unauthenticated Unauthorized Order Document Access via 'email' Param…

• WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels
• Broken access control

AutomatorWP <= 5.8.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via wp_ajax_automatorwp_fluentform_get_forms AJAX Action

• rubengc AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI
• Broken access control

WordPress Motors theme <= 1.4.108 - Broken Access Control vulnerability

• StylemixThemes Motors
• Broken access control

Unauthorized information acquisition vulnerability in ZTE Z80 Ultra product

• ZTE Z80 Ultra
• Broken access control

CV Builder – Professional Resume Builder SaaS <= 1.3.1 - Missing Authorization to Unauthenticated PNG File Upload

• bestwpdeveloper WP CV Builder
• Broken access control

WP File Download <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion/Modification via 'task' Parameter to Multiple Functions

• JoomUnited WP File Download
• Broken access control

Fluent Forms <= 6.2.5 - Missing Authorization to Authenticated (Custom+) Sensitive Data Exposure and Modification

• wpmanageninja Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder
• Broken access control

Tutor LMS 4.0.5 - 4.1.0 - Instructor+ Arbitrary Post Reparenting via IDOR

• Tutor LMS
• Broken access control

Accept PayPal Payments using Contact Form 7 < 4.0.7 - Unauthenticated Transaction Status Forgery

• Accept PayPal Payments using Contact Form 7
• Broken access control

Portfolio Filter Gallery 2.0.2 - 2.2.0 - Contributor+ Cross-User Video Thumbnail Deletion via pfg_delete_video_thumbnail

• Portfolio Filter Gallery
• Broken access control

Portfolio Filter Gallery < 2.2.1 - Contributor+ Missing Authorization via Multiple AJAX Actions

• Portfolio Filter Gallery
• Broken access control

AI Puffer <= 2.4.89 - Missing Authorization to Authenticated (Subscriber+) Semantic Search Settings Modification via ajax_save_semantic_search_settings AJAX action

• senols AI Puffer – AI Chatbot, AI Writer & Automation
• Broken access control

AI Puffer <= 2.4.89 - Missing Authorization to Authenticated (Subscriber+) Global Plugin Settings Modification via ajax_save_cpt_indexing_options AJAX Endpoint

• senols AI Puffer – AI Chatbot, AI Writer & Automation
• Broken access control

Appointment Booking Plugin <= 5.7.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Unauthorized Booking Creation and Sensitive Information Disclosure via 'params[presets][order_ite…

• Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress
• Broken access control

rtMedia for WordPress, BuddyPress and bbPress <= 4.7.13 - Missing Authorization to Unauthenticated Limited File Read/Disclosure and Limited File Deletion via Sideload via 'files[tmp_name]' Parameter

• rtcamp rtMedia for WordPress, BuddyPress and bbPress
• Broken access control

Appointment Booking Calendar <= 1.6.11.11 - Incorrect Authorization to Unauthenticated Sensitive Field Modification via Appointment Public Token

• croixhaug Simply Schedule Appointments
• Broken access control

Hello Plus <= 1.7.7 - Authenticated (Contributor+) Missing Authorization to Template Activation via hello_plus_set_as_entire_site

• elemntor Hello Plus
• Broken access control

Online Scheduling and Appointment Booking System <= 28.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Privilege Escalation via 'id' and 'wp_user_id' Parameters via Query String /…

• ladela Online Scheduling and Appointment Booking System – Bookly
• Broken access control

Academy LMS <= 4.0.3 - Missing Authorization to Authenticated (Custom+) Arbitrary Academy Comment Deletion via delete_lesson_comment AJAX — Attacker-Controlled course_id vs. Target comment_id

• kodezen Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning
• Broken access control

Vikunja: Write-level project members can delete admin-tier link shares through an unloaded permission check

• Broken access control

>=0.13.0, <2.7.0 · fixed in 2.7.0

Vikunja: Explicit lower-permission share on a sub-project is silently overridden by an inherited parent permission (broken access control / privilege-management regression in v2.6.0)

• Privilege escalation
• Broken access control

>=2.6.0, <2.7.0 · fixed in 2.7.0