Broken access control.

UnicomAI Wanwu through 0.6.5 Missing Authorization via DELETE /v1/appspace/app/publish

• UnicomAI Wanwu
• Broken access control

Wanwu before 0.6.3 IDOR AppKey Deletion via DELETE /v1/appspace/app/key

• UnicomAI Wanwu
• Broken access control

UnicomAI Wanwu before 0.6.3 IDOR via DELETE /v1/appspace/app

• UnicomAI Wanwu
• Broken access control

phpMyFAQ through 4.1.10 Missing Authorization via MCP Server faq_search Tool

• thorsten phpMyFAQ
• Broken access control

CoreShop through 2026.2.2 Missing Authorization via ResourceController listAction

• CoreShop
• Broken access control

Neterbit NW-431F Embedded Web Server sms.json information disclosure

• Neterbit NW-431F
• Information disclosure
• Broken access control

Easy!Appointments through 1.6.0 Authorization Bypass via booking/register Endpoint

• alextselegidis easyappointments
• Broken access control

Abilityai Trinity through 0.9.5 Missing Authorization in Telegram Binding Routes

• Abilityai trinity
• Broken access control

Lightdash through 2.556.0 Authorization Bypass via Personal Access Token Deletion

• lightdash
• Broken access control

Vearch 3.5.2 through 3.5.9 Incorrect Authorization via Role.HasPermissionForResources

• vearch
• Broken access control

CloudBeaver through 25.3.5 Missing Authorization via /api/sql-result-value Servlet

• CloudBeaver
• Broken access control

CloudBeaver through 25.3.5 Missing Authorization via initConnection GraphQL Mutation

• CloudBeaver
• Broken access control

GoatCounter through 2.7.0 Privilege Escalation via /user/pref Mass Assignment

• arp242 GoatCounter
• Broken access control

Frappe CRM 1.49.0 through 1.87.0 Missing Authorization via get_linked_docs_of_document

• frappe crm
• Broken access control

Frappe HR (hrms) before 16.11.0 Missing Authorization via expire_allocation

• frappe hrms
• Broken access control

Frappe HR (hrms) before 16.11.0 Missing Authorization via get_account_and_amount

• frappe hrms
• Broken access control

Raven 2.0.0 through 3.0.0 Missing Authorization via join_workspace Invite-Only Bypass

• The-Commit-Company raven
• Broken access control

Raven 2.0.0 through 3.0.0 Missing Authorization via Legacy Message and File APIs

• The-Commit-Company raven
• Broken access control

Corteza through 2024.9.10 Unauthenticated Attachment Access via Compose Attachment Endpoints

• corteza
• Broken access control

EdgeEver through 1.108.0 Missing Authorization via Memo-Template API Routes

• tianma-if EdgeEver
• Broken access control

GLPI through 12.0.0 Missing Authorization via ajax/map.php

• GLPI
• Broken access control

Sylius through 2.3.0 Authorization Bypass via Shop API Product-Review Endpoint

• Sylius
• Broken access control

phpIPAM through 1.8.3 Missing Authorization in Customers, Locations and NAT Pages

• phpipam
• Broken access control

Rill 0.77.0 through 0.90.5 OAuth Missing Authorization via Dynamic Client Registration

• rill
• Broken access control

Combodo iTop 3.1.0 through 3.3.0 Missing Authorization via LinkSetController

• Combodo iTop
• Broken access control

LibreNMS through 26.9.1.1 Authorization Bypass via Smokeping Graph auth.inc.php

• librenms
• Broken access control

SuiteCRM through 7.15.2 and 8.10.2 Missing Authorization via setCampaignMarketingAndTemplate

• SuiteCRM
• Broken access control

SuiteCRM through 7.15.2 and 8.10.2 Missing Authorization via DetailUserRole Entry Point

• SuiteCRM
• Broken access control

Plastic Labs Honcho through 3.3.0 Incorrect Authorization via POST /v3/workspaces

• Plastic Labs honcho
• Broken access control

NornicDB through 1.4.1 Missing Authorization via Vector Search Endpoints

• orneryd NornicDB
• Broken access control

BerriAI LiteLLM Secret Resolution main.py get_secret improper authorization

• BerriAI LiteLLM
• Privilege escalation
• Broken access control

BerriAI LiteLLM Spend Tracking spend_management_endpoints.py ui_view_session_spend_logs authorization

• BerriAI LiteLLM
• Broken access control

WP Posts Password Batch Manager <= 1.1 - Unauthenticated Bulk Post Password Rewrite

• WP Posts Password Batch Manager
• Broken access control

Insurify <= 1.0 - Unauthenticated Arbitrary Option Deletion via removeimg_popup

• Insurify
• Broken access control

Quick quotes <= 1.0.0 - Unauthenticated Integer-Value Option Update

• Quick quotes
• Broken access control

Insurify <= 1.0 - Unauthenticated Arbitrary Option Creation and Overwrite via saveemailtemplatedesign

• Insurify
• Broken access control

click5 CRM add-on to Contact Form 7 <= 1.0.4 - Unauthenticated Arbitrary Options Update

• click5 CRM add-on to Contact Form 7
• Broken access control

click5 CRM add-on to Gravity Forms <= 1.0.3 - Unauthenticated Arbitrary Options Update

• click5 CRM add-on to Gravity Forms
• Broken access control

click5 CRM add-on to WPForms <= 1.0.3 - Unauthenticated Arbitrary Options Update

• click5 CRM add-on to WPForms
• Broken access control

click5 CRM add-on to Ninja Forms <= 1.0.1 - Unauthenticated Arbitrary Options Update

• click5 CRM add-on to Ninja Forms
• Broken access control

Fundiin <= 3.4.0 - Unauthenticated Payment Gateway Settings Update and Credential Disclosure

• Fundiin cho WooCommerce
• Broken access control

Squadeno < 1.12.0 - Trainer+ Section and Age Group Reassignment via Quick Edit

• Squadeno
• Broken access control

WeddingCity Lite <= 1.0.4 - Unauthenticated Arbitrary Post and Attachment Deletion

• WeddingCity Lite
• Broken access control

Envira Gallery < 1.16.2 - Author+ IDOR via Shortcode

• Envira Gallery
• Broken access control

Envira Gallery < 1.16.2 - Contributor Missing Authorization via Convert Gallery REST Route

• Envira Gallery
• Broken access control

Simple User Registration <= 6.9 - Subscriber+ Arbitrary Email Sending via wpr_send_email_to_user

• MemberHero
• Broken access control

CoreShop through 1.5.5 Authorization Bypass via OrderController OrderConfirm and SendReship

• CoreUnion CoreShop
• Broken access control

MultiVendorX through 5.0.19 Incorrect Authorization via Settings REST Endpoint

• MultiVendorX
• Broken access control

Wukong_HRM through commit 186115e Missing Authorization via EmployeeAspect and EmployeeUtil

• WuKongOpenSource Wukong_HRM
• Broken access control

eladmin through commit 55fbf70 Missing Authorization via S3 Storage Download Endpoint

• elunez eladmin
• Broken access control

CordysCRM through 1.9.3 Missing Authorization via /custom-form/data/import

• 1Panel-dev CordysCRM
• Broken access control

CordysCRM through 1.9.3 Authorization Bypass via Follow-Up Record Add Endpoints

• 1Panel-dev CordysCRM
• Broken access control

CordysCRM through 1.9.3 Missing Authorization via /approval-resource/push

• 1Panel-dev CordysCRM
• Broken access control

CordysCRM through 1.9.3 Missing Authorization and Blind SSRF via Webhook Test

• 1Panel-dev CordysCRM
• Broken access control

1Panel-dev CordysCRM before 1.9.2 Missing Authorization via POST /contract/sort

• 1Panel-dev CordysCRM
• Broken access control

1Panel-dev CordysCRM before 1.9.2 Missing Authorization via /field/source/business-title

• 1Panel-dev CordysCRM
• Broken access control

1Panel-dev CordysCRM 1.9.0 before 1.9.2 Missing Authorization via /field/source Endpoints

• 1Panel-dev CordysCRM
• Broken access control

Wukong AICRM through 20260610 Authorization Bypass via User-Controlled Session ID in POST /chat/send

• WuKongOpenSource Wukong AICRM
• Broken access control

Eladmin through 2.7 Missing Authorization via /api/localStorage/pictures Upload

• elunez eladmin
• Broken access control

JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendTemplateAnnouncement

• JeecgBoot
• Broken access control