Authentication Bypass
Monthly
Improper input validation in Edge for Android allows a remote attacker to tamper with data over a network by convincing a user to interact with malicious content. Exploitation requires user interaction and results in low confidentiality and integrity impact, with no availability loss. No public exploit or active exploitation is known; an official vendor patch is available.
Missing authorization in the Storegrowth Sales Booster plugin for WordPress ≤2.1.0 allows unauthenticated attackers to modify the BOGO category-message configuration. The vulnerability arises from an AJAX handler that only verifies a nonce value publicly exposed on every frontend page, bypassing capability checks. There is no evidence of active exploitation or publicly available exploit code, and impact is limited to low integrity loss with no confidentiality or availability impact.
Authorization bypass in StoreGrowth for WooCommerce allows unauthenticated attackers to overwrite the spsg_popup_products option with arbitrary data. The plugin fails to properly verify user authorization, relying on a nonce that is publicly exposed to all visitors via wp_localize_script in the BoGo module. Affects all versions up to 2.1.0; no active exploitation or public exploit code identified at time of analysis.
Missing authorization in the WPBot WordPress plugin allows unauthenticated attackers to send arbitrary emails from the site's domain. Versions up to 8.5.9 are vulnerable via the wpcs_send_email() AJAX handler, which lacks nonce verification and capability checks. No active exploitation has been identified, but the flaw can be easily automated for spam or phishing campaigns.
Authenticated users of pretix can abuse the 'quick setup' view shown right after an event is created to alter configuration on events they do not have permission to manage - creating products and quotas, setting bank-transfer configuration, or linking a Stripe account. Exploitation requires a valid logged-in account (CVSS PR:L) and a well-timed, race-condition-style request (AT:P) to hit the configuration actions before the per-event permission check applies, which substantially limits reliability; the assessed vector (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N) confines impact to integrity of event configuration with no confidentiality or availability loss. All signals - a 2.3 CVSS 4.0 base score, EPSS of 0.21% (11th percentile), SSVC 'Exploitation: none / Automatable: no / Technical Impact: partial', and the absence of KEV listing or public exploit code - converge on low real-world priority, and no public exploit has been identified at time of analysis. Fixed versions are available from the vendor.
Rate-limiting bypass vulnerability in an unspecified screen-sharing application allows an attacker with local network access to brute-force the screen-sharing code, potentially displaying harmful content on the target screen. The vulnerability has a CVSS score of 3.3 (Low) with a local attack vector, though the description suggests network-adjacent access. No evidence of active exploitation or public exploit code identified at the time of analysis.
Authenticated customers of the FluentCart WordPress plugin can manipulate other users' subscriptions by exploiting missing ownership verification in payment-method endpoints. The vulnerability affects versions before 1.4.0 and allows an attacker with low privileges to change payment methods or cancel subscriptions if they know the target subscription identifier. Publicly available exploit code exists, but EPSS probability is low (0.13%) and no active exploitation in CISA KEV has been reported.
The Quiz and Survey Master WordPress plugin before version 11.1.5 permits authenticated users with contributor-level permissions to delete arbitrary output templates due to a missing capability check. Public exploit code is available, though no active exploitation has been confirmed. A vendor patch (version 11.1.5) addresses this issue.
Authorization bypass in Advanced Form Integration plugin for WordPress up to 2.6.0 allows authenticated attackers with subscriber-level access to overwrite MailUp OAuth tokens. The missing authorization check on admin_init enables token hijacking, letting attackers redirect form-submission data to a controlled MailUp account or break the integration. Exploitation requires only a subscriber account and visiting any wp-admin page, making it a low‑complexity attack with moderate impact on data integrity.
Information disclosure in ShopLentor WordPress plugin versions ≤3.4.5 allows authenticated attackers with contributor-level access to read arbitrary wp_options rows whose values are stored as arrays-of-arrays containing 'title' keys, leading to cross-plugin data leakage of internal plugin news feeds, WooCommerce block pattern transients, and third-party configuration records. The vulnerability exists due to missing authorization checks on the user-controlled 'optionSection' parameter in the plugin’s API, and no public exploit or active exploitation has been reported.
Unauthorized data access in the PDFDraft WordPress plugin allows unauthenticated attackers to download stored template PDFs containing customer PII, invoices, orders, and certificates. This is due to a missing capability check in the serveTemplatePdfAjax() function and the REST route registered with `__return_true`, affecting versions up to and including 1.1.0. No public exploit or active exploitation has been identified at the time of analysis, and the CVSS base score of 5.3 reflects the moderate but easily exploitable nature of the issue.
Broken access control in the Ad Invalid Click Protector (AICP) WordPress plugin up to version 1.3.0 allows unauthenticated attackers to manipulate plugin settings or disrupt its click-protection functionality. No active exploitation or public proof-of-concept is currently known, but the vulnerability is easily triggered over the network with no user interaction.
Unauthorized notification deletion in Prospero Flow CRM allows any authenticated user to delete other users' notifications by manipulating the ID parameter in the /notification/delete/{id} endpoint. Sequential notification IDs enable systematic deletion across the system, disrupting user awareness of critical business events. A vendor fix is available in version 5.5.3, and no active exploitation has been reported.
Information disclosure in macOS Screen Sharing allows a local attacker with low privileges to read the legacy VNC password. This issue affects macOS versions prior to 15.7.8 and 14.8.8, and could enable unauthorized remote access if VNC is enabled. No active exploitation or public exploit code has been identified.
A file quarantine bypass in macOS Gatekeeper allows maliciously crafted ZIP archives to evade security checks. Affected versions include macOS Sequoia before 15.7.8 and macOS Sonoma before 14.8.8. Exploitation is not confirmed in the wild, public exploit code has not been identified, and EPSS indicates very low likelihood of widespread attacks.
A Gatekeeper bypass in macOS allows maliciously crafted ZIP archives to evade security checks, enabling installation of untrusted applications. Affected are macOS Sonoma 14.x prior to 14.8.8 and Sequoia 15.x prior to 15.7.8; exploitation requires user interaction. No active exploitation or public exploit code is known, and a vendor patch is available.
Local information disclosure in Apple iOS and iPadOS 26.6 and earlier, as well as multiple macOS versions, allows an app to leak sensitive user data due to missing entitlement checks. The vulnerability requires user interaction and local access, but has low exploitation probability (EPSS 0.16%) and no known public exploits or active exploitation per CISA KEV.
Local access to sensitive user data in macOS allows a malicious app to bypass sandbox restrictions and read protected files or information. This issue affects all macOS versions prior to Tahoe 26.6, requires user interaction to run the malicious app (e.g., via social engineering or masquerading as legitimate software), and has no public exploit or active exploitation reported at this time.
macOS authorization bypass allows an app to access sensitive user data without proper permission, potentially triggered via malicious website in Safari
Information disclosure in macOS allows an attacker with physical access to a locked device to view sensitive user information. Affected versions include macOS Sonoma below 14.8.8, macOS Sequoia below 15.7.8, and macOS Tahoe below 26.6. No public exploit or active exploitation has been identified, and EPSS probability is very low at 0.16%, reflecting the physical access requirement.
Unauthorized file read via a sandbox escape vulnerability in Apple iOS, iPadOS, macOS, tvOS, watchOS, and visionOS allows a malicious app to access files outside its designated sandbox. Exploitation requires user interaction to install and launch a malicious app, but no active exploitation or public exploit code is currently known. CVSS medium severity (6.5) is offset by a very low EPSS score (0.17%), indicating low real-world exploitation probability.
A file quarantine bypass in Apple macOS allows a malicious application to evade Gatekeeper integrity checks. Affected versions include macOS prior to 15.7.8, 14.8.8, and 26.6. Local attackers with user interaction can leverage this to execute unsigned code that would normally be blocked, leading to potential integrity compromise.
Physical access to an iPhone or iPad running vulnerable iOS/iPadOS versions allows an attacker to access sensitive user data during the iPhone Mirroring feature due to improper state management. This issue is fixed in iOS 26.6 and iPadOS 26.6. No known exploitation in the wild; EPSS score is low (0.15%, percentile 5%).
Authentication bypass via lock screen in macOS allows a person with physical access to view contacts and photos on a locked device. The issue affects macOS prior to Sequoia 15.7.8 and Tahoe 26.6. No active exploitation or public exploit code is reported, but the vulnerability bypasses a fundamental security boundary.
Sensitive user data exposure in macOS allows a malicious app to read private information by bypassing access controls. Affected versions are prior to Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6. No public exploit or active exploitation has been identified; EPSS score of 0.16% indicates a very low probability of widespread attacks.
An inconsistent user interface state management in multiple Apple operating systems allows remote attackers to bypass network filters, potentially leading to unauthorized actions on the system. The vulnerability requires user interaction (e.g., clicking a link) and affects iOS and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. No active exploitation has been reported at this time, and the EPSS score (0.27%, 20th percentile) indicates a low immediate threat.
An authorization bypass vulnerability in Apple macOS allows a local application to access sensitive user data without proper authorization. This issue is fixed in macOS Sequoia 15.7.8 and macOS Tahoe 26.6. No active exploitation (not in CISA KEV) or public proof-of-concept has been identified, and EPSS scores the exploitation probability as low (0.15%).
Sandbox escape in macOS allows a malicious app to read files outside its sandbox. Affects macOS Sonoma prior to 14.8.8, Sequoia prior to 15.7.8, and Tahoe prior to 26.6. No active exploitation or public exploit
An authorization bypass in Apple iOS, iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS versions before 26.6 allows an app to access sensitive user data without proper permission. The vulnerability requires user interaction (opening a malicious app) and has not been actively exploited, with no CISA KEV listing and a low EPSS probability of 0.16%.
Hardcoded credentials in TP-Link router firmware allow attackers with physical access to gain unauthorized access to privileged functions, potentially leading to full device compromise. Affected models include TL-WR845N v4, TL-WR850N v3, Archer C20 v6, and Archer MR200 v5. No evidence of active exploitation or public exploit code exists at this time, and the physical access requirement limits remote exploitation risk.
Authorization bypass in JFrog Artifactory enables authenticated users with limited repository access to modify internal metadata under specific conditions, leading to integrity and availability impact. No exploitation or public proof-of-concept has been identified at this time, and EPSS data is unavailable, but the high integrity impact warrants a prompt patching response.
Improper authorization in Papra allows authenticated users to delete or rename tags belonging to other organizations. The vulnerability affects Papra versions before 26.5.0, where tag mutation endpoints fail to scope database operations to the organization in the URL. An attacker with low privileges and membership in any organization can modify or remove tags of a different organization by knowing the target tag's identifier.
Disclosure of plaintext credential secrets in Devolutions Server allows authenticated low-privileged users to access PAM password history entries via crafted API requests. Affected versions are 2026.2.4.0 through 2026.2.12.0 and 2026.1.23.0 and earlier, with vendor patches released (DEVO-2026-0026). No active exploitation or public exploit code has been identified at time of analysis.
Authorization bypass in Apache ActiveMQ 5.x before 5.19.9 and 6.x before 6.2.8 allows authenticated low-privilege users to publish messages to any queue without proper write ACLs by abusing temporary composite destinations. This enables unauthorized message injection into restricted queues, potentially disrupting message integrity and business logic. No active exploitation or public exploit code has been identified.
Improper authorization in AstrBot up to version 4.25.5 allows authenticated remote attackers to bypass tool access restrictions in the Subagent component. The flaw arises from insufficient filtering of handoff tools, exposing restricted functionality to low-privileged users. A public proof-of-concept exploit exists, though the overall severity is low (CVSS 4.0 score 2.1) and no active exploitation is reported in CISA KEV.
Authorization bypass in unitedbyai Droidclaw up to version 0.5.3 allows low-privileged remote attackers to bypass authorization checks on the Unsigned Scheduled Callback endpoint. Exploitation is difficult due to high attack complexity, but publicly available exploit code exists. The flaw can grant unauthorized access to or modification of goal data.
Incorrect authorization in AstrBot up to 4.25.5 allows remote authenticated users to bypass persona-based tool restrictions and execute unauthorized function tools. A public exploit exists, and a patch is available from the vendor. No active exploitation has been reported via CISA KEV, but the public exploit increases risk for deployments using persona tool controls.
Hardcoded credential in Ericsson Packet Core Controller (PCC) versions before 1.38 allows an attacker with cluster access to read alarm and alert information
Unauthenticated broken access control in the Gillion WordPress theme (versions ≤ 4.13) allows remote attackers to modify certain data without authentication, with no confidentiality or availability impact. The vulnerability, tracked as CVE-2026-66477, has a CVSS score of 5.3 (Low integrity). No known public exploit or active exploitation exists at this time.
Broken access control in YayPricing ≤ 3.5.6 allows authenticated subscribers to modify pricing data or cause service disruption. The vulnerability, rated medium severity (CVSS 5.4), stems from missing authorization checks in an endpoint that should be restricted to higher-privilege roles. No public exploit code or active exploitation is known at the time of analysis.
Broken access control in Visual Composer Website Builder plugin for WordPress allows authenticated attackers with low privileges (e.g., subscriber) to modify site content by bypassing authorization checks on restricted endpoints. No public exploit has been identified, and the SSVC decision framework indicates no current exploitation, making this a low-priority issue despite a CVSS 5.0 score.
An unauthenticated broken access control vulnerability in Event Tickets through version 5.29.0.1 allows remote attackers to modify event ticket data without authentication. The vulnerability affects installations of the WordPress plugin where default configurations are in place, permitting unauthorized integrity impact. No active exploitation or public exploit code has been reported at the time of this analysis.
Unauthenticated attackers can exploit broken access control in the Thrive Leads WordPress plugin (versions ≤10.9.2) to perform unauthorized modifications or disrupt functionality, with low integrity and availability impact. No public exploit or active exploitation has been reported at the time of analysis.
Broken access control in RT Mega Menu plugin for WordPress ≤1.5.1 allows authenticated subscribers to modify mega menu settings without proper authorization checks. This could lead to unauthorized changes to navigation structures, potentially facilitating phishing or content tampering. No public exploit or active exploitation reported at time of analysis.
Authenticated users holding only a Subscriber-level WordPress account can disrupt the fundraising functionality of sites running the FundEngine plugin (slug wp-fundraising-donation) through version 1.7.8, because a plugin action omits its capability and nonce authorization checks (CWE-862 missing authorization). The effect is limited to availability - there is no data disclosure or modification - and access requires an existing low-privilege login, which is realistic mainly where open user registration is enabled or the attacker already has an account. No public exploit code has been identified and there is no indication of active exploitation; EPSS is a low 0.35% (28th percentile) and CISA's SSVC framework rates exploitation as none, automatable as no, and technical impact as partial.
Missing authorization in the Events Made Easy plugin for WordPress up to version 3.1.3 permits unauthenticated remote attackers to modify event data and partially disrupt service availability without user interaction. This broken access control flaw stems from a missing capability check (CWE-862) on a REST API or AJAX endpoint, leading to low integrity and availability impact with no confidentiality loss.
Unauthenticated attachment deletion in the User Frontend WordPress plugin before 4.3.8 allows remote attackers to permanently delete author-less attachments, such as guest uploads or placeholder media. The vulnerability stems from missing ownership checks on attachment deletion requests, and a proof-of-concept exploit is publicly available. The vendor has released a patch in version 4.3.8.
Integrity bypass in The Events Calendar WordPress plugin allows unauthenticated attackers to mark existing Event Aggregator import records as failed and insert arbitrary content into a hidden comment. Public exploit code is available, and the vulnerability is automatable via the REST API, increasing the risk beyond the moderate CVSS score.
A spoofing vulnerability in Microsoft Edge (Chromium-based) allows remote attackers to bypass origin validation, enabling them to trick users into believing they are interacting with a trusted website. The flaw, tracked as CVE-2026-57978, affects all pre-patch versions of Edge and can be exploited via a malicious site with user interaction. No active exploitation or public exploit code has been identified, and Microsoft has released a patch.
Improper authorization in nanocoai NanoClaw's add_mcp_server endpoint allows authenticated attackers with low privileges to bypass access controls and perform unauthorized actions, such as adding MCP servers without proper authorization. Versions up to and including 2.0.64 are affected, and publicly available exploit code exists. A vendor patch is available via commit e5b928783d5c485637565eb07d2967922dfbf8d8.
Improper authorization in NanoClaw's MCP Server Approval component allows local attackers to bypass security controls by manipulating the createChatSdkBridge.setup function. The vulnerability affects all versions up to 2.0.64, and a public exploit is available, although no active exploitation or CISA KEV inclusion has been confirmed.
SimpleX Gateway authorization bypass in NousResearch hermes-agent 2026.6.5 allows an established SimpleX contact to authorize themselves to the agent by renaming their own profile display name to a value already present in the SIMPLEX_ALLOWED_USERS allowlist. The gateway's allowlist check matched the contact's self-asserted, remote-controlled profile name (source.user_name) alongside the numeric contactId, so any contact who guesses or knows an allowlisted display name can be treated as trusted without holding the real identity. Exploitation requires the SimpleX platform adapter to be enabled, an allowlist configured with human display names rather than numeric contactIds, a pre-existing contact relationship, and knowledge of an allowlisted name (remote, high complexity, authenticated per PR:L); publicly available exploit code exists and EPSS is only 0.23% (14th percentile), with no CISA KEV listing and no confirmed in-the-wild exploitation. Impact is limited to unauthorized authorization into the agent, not code execution.
Authorization bypass in Cloudreve WOPI integration allows view-only sessions to modify files. The WOPI access token secret is ignored, and view-created sessions can call write endpoints, enabling unintended file modification even when the viewer should be read-only. An attacker with a valid user session or control of a WOPI viewer can exploit this to overwrite files. Publicly available exploit code exists, but no active exploitation confirmed.
Metadata leakage in Cloudreve single-file shares allows an authenticated recipient to observe file activity (rename, create, delete) of unshared siblings in the owner's parent folder via the event stream endpoint, exposing file names and operation types but not file contents.
Authorization bypass in Red Hat Certificate System's CA renewal path allows an authenticated user to renew a certificate belonging to a different realm without the required realm-based authorization check. Affects versions 9, 10, and 11 of the Certificate System on Red Hat Enterprise Linux 6 through 10. No evidence of active exploitation or public exploit code exists at the time of analysis, and EPSS probability is low (0.21%).
Unauthenticated attackers can overwrite operator metadata including email and company name in lakeFS versions through 1.83.0 via the /setup_comm_prefs endpoint, potentially disabling security communications and manipulating telemetry. Exploit code is publicly available, but no active exploitation has been confirmed by CISA KEV.
A CORS misconfiguration in Jan up to version 0.8.4 allows network-adjacent attackers to bypass trusted host restrictions when the server is bound to 0.0.0.0, enabling unauthorized access to the OpenAI-compatible API for model enumeration, inference, and MCP tool invocation. A publicly available exploit exists, and CISA KEV does not list active exploitation; EPSS score is low at 0.19%, indicating limited real-world exploitation risk.
Unauthorized data access in Apache HBase thrift and rest delegation service allows an authenticated low-privilege attacker to fetch rows from scanner instances opened by other users, exposing confidential data. Versions 2.4.x through 2.5.14, 2.6.0–2.6.5, and 3.0.0-alpha-1 through beta-1 are affected. No public exploit code is known and exploitation is not reported in the wild.
Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user with the Reader role to execute automation tests and modify workflow properties due to missing server-side authorization checks. This results in privilege escalation to perform restricted operations, though the EPSS exploitation probability is low (0.15%) and no active
Information disclosure in Red Hat Build of Keycloak allows restricted administrators to view private user details (names, email addresses) via the role-users endpoint, due to a missing permission check. The flaw affects the keycloak-services library, exposing sensitive data to low-privilege users. No active exploitation or public exploit is known, and EPSS indicates low exploitation probability.
Improper access control in Octopus Deploy allows an authenticated attacker with high privileges to trigger deployments without proper authorization. Affected versions include Octopus Server 2023.0.0 through 2026.1.x before 2026.1.11587 and 2026.2.0 before 2026.2.13190. No active exploitation or public exploit code is known; EPSS indicates low exploitation probability.
Order fulfillment fraud in the Payment Plugins for Stripe WooCommerce WordPress plugin allows unauthenticated network attackers to mark arbitrary pending WooCommerce orders as paid without actual payment. Any store running version 4.0.7 or earlier with the default blank webhook secret is exposed to fraudulent goods acquisition, as the plugin's webhook endpoint accepts and processes forged Stripe charge events without signature verification. No public exploit has been identified at time of analysis, but the attack requires no credentials, targets the default installation state, and is trivially automatable.
License setting overwrite in ProfileGrid WordPress plugin versions before 5.9.9.7 allows authenticated users with Subscriber-level access or higher to overwrite premium license settings due to a missing capability check. Publicly available exploit code exists but active exploitation has not been confirmed. The flaw stems from relying solely on a nonce exposed to any logged‑in user, bypassing proper authorization.
Missing authorization checks in ProfileGrid WordPress plugin prior to 5.9.9.7 allow authenticated subscribers to manipulate private messages of other users. Attackers can soft-delete threads, alter metadata, and mark messages as read without owning the thread, impacting user privacy and data integrity. Public exploit code exists, but no active exploitation has been confirmed, and EPSS indicates very low exploitation probability (0.13%).
Authentication bypass in ProfileGrid WordPress plugin allows unauthenticated attackers to forge PayPal IPN payment notifications, granting paid membership to any group without payment. The vulnerability affects all versions before 5.9.9.7. A public proof-of-concept exploit is available, though the EPSS score (0.14%, percentile 3) indicates low likelihood of widespread exploitation at this time.
Authentication bypass in OpenStack Zaqar through version 22.0.0 allows network-reachable attackers without credentials to circumvent access controls by supplying a crafted EXTRA-SPEC HTTP header paired with a known queue UUID. The root cause is CWE-306 (Missing Authentication for Critical Function), meaning the service fails to enforce credential validation on certain request paths when this header is present. No public exploit code has been identified at time of analysis and no CISA KEV listing exists, but the network-accessible nature of Zaqar's REST API makes this a meaningful risk for deployments where queue UUIDs may be discoverable through logs or enumeration.
Rate-limiting on ZenML's login and self-password-change endpoints can be completely bypassed in versions 0.57.0 through 0.94.2 by rotating the client-supplied `X-Forwarded-For` header, enabling unthrottled brute-force credential guessing against any exposed ZenML server. The rate limiter in `rate_limit.py` keyed on the raw `X-Forwarded-For` header value rather than the verified peer address, a design that is exploitable whenever Uvicorn is launched with `--proxy-headers --forwarded-allow-ips *` - which was the Helm chart default. No active exploitation is confirmed in CISA KEV; an upstream fix commit is available but a released patched version is not independently confirmed from available data.
Unauthenticated record takeover in the Participants Database WordPress plugin (all versions ≤ 2.7.8.3) allows any remote attacker to overwrite arbitrary participant records by guessing or enumerating numeric IDs, redirect the private-access link to an attacker-controlled email, and achieve full read and edit access to victim PII including names, email addresses, and phone numbers. The attack requires no credentials - a valid nonce is freely obtainable via a plain GET request to any public page rendering the plugin's signup or record form. No CISA KEV listing or public exploit code has been identified at time of analysis, but the zero-authentication, low-complexity attack path is trivially scriptable at scale.
Unauthorized content disclosure in the Kirki - Freeform Page Builder plugin for WordPress (all versions ≤ 6.0.14) allows unauthenticated remote attackers to read the full title, body, and excerpt of any WordPress post by supplying an arbitrary post ID via the unvalidated `context` parameter in the plugin's frontend REST API. Affected content includes drafts, pending posts, privately published posts, password-protected posts, and trashed posts - bypassing all native WordPress visibility controls. No active exploitation confirmed (not in CISA KEV), and no public POC is identified at time of analysis, but the attack requires zero authentication and low complexity per the CVSS vector.
Unauthenticated webhook injection in APIFold corrupts trusted MCP server state by allowing any network client to POST arbitrary JSON payloads to the `/webhooks/:serverSlug/:eventName` endpoint, which are stored in Redis and the `webhook_events` PostgreSQL table without any signature check. All deployments prior to commit 7f19b52280f414f57af2b79a95333d1c8fbeece5 are affected; the flaw is architectural rather than misconfiguration-dependent, as signature validation was never wired into the webhook router. No public exploit code has been identified at time of analysis and CISA KEV listing is absent, but the attack requires only a valid server slug, making exploitation straightforward for targeted actors.
Insecure Direct Object Reference (IDOR) in ITFlow allows a low-privileged authenticated agent to exfiltrate plaintext credentials and TOTP secrets belonging to any client by supplying an arbitrary `credential_id` to the credential edit modal endpoint. The affected endpoint performs no client-scoping or object-level authorization check before loading and decrypting the stored credential record, making cross-client data access trivially achievable with any valid agent account. No active exploitation is confirmed (not in CISA KEV), but the high confidentiality impact (CVSS C:H) reflects the severity of exposing decrypted secrets and multi-factor authentication seeds across MSP client boundaries.
Authorization bypass in AgentGPT through 1.0.0 allows authenticated attackers to hijack other users' agent runs by supplying an arbitrary run_id in the request body, exploiting missing ownership validation in the AgentCRUD.create_task and validate_task_count functions. Successful exploitation enables task history corruption, exhaustion of per-run LLM loop budgets, and financial damage by driving API costs against the victim's account. A public proof-of-concept exists per VulnCheck reporting; no CISA KEV listing is present, and the low CVSS 4.0 score of 2.3 reflects the high attack complexity and constrained integrity/availability impact.
Authorization bypass in Overseerr's push subscription API (versions through 1.35.0) allows any authenticated user to enumerate, read, and delete the push subscriptions of arbitrary other users by supplying a target userId in path parameters - no elevated privileges required. The missing ownership check bypasses the filteredFields filter applied to normal user data access, exposing sensitive PII including email addresses and plexId values. A publicly available proof-of-concept exists; no CISA KEV listing at time of analysis.
DOMPurify versions up to and including 3.3.3 incorrectly resolves a tag-allow conflict when ADD_TAGS is used in its function form alongside FORBID_TAGS, causing forbidden tags to survive sanitization. The flaw is a short-circuit evaluation error in purify.ts (lines 1117-1123): when the ADD_TAGS callback (tagCheck) returns true for a tag, the Boolean AND short-circuits, meaning FORBID_TAGS is never consulted - directly contradicting the attribute-side behavior where FORBID_ATTR always wins. An attacker who can supply HTML to an application using this specific configuration can inject tags the developer explicitly intended to block, leading to XSS or related injection in whatever context the sanitized output is rendered. No public exploit code has been identified and the vulnerability is not listed in CISA KEV at time of analysis.
Broken access control in Cyr to Lat Reloaded (WordPress plugin by Themeisle) allows low-privileged authenticated users at the subscriber role to invoke restricted plugin actions on affected WordPress installations running version 1.3.3 and below. The flaw stems from missing authorization checks (CWE-862), permitting subscribers to perform operations intended for higher-privileged users such as editors or administrators. No public exploit code or active exploitation has been identified at time of analysis, but the low attack complexity and network accessibility via standard WordPress HTTP endpoints make it straightforward to abuse given subscriber-level access.
Broken access control in the Qubely WordPress Gutenberg block plugin (versions up to and including 1.8.14) allows unauthenticated remote attackers to bypass authorization checks and perform restricted actions, resulting in limited confidentiality and integrity compromise. The vulnerability stems from missing authorization enforcement (CWE-862) on one or more plugin endpoints exposed to the network. No public exploit code or active exploitation has been identified at time of analysis, and the CVSS vector reflects high attack complexity, tempering real-world risk below what the unauthenticated access vector alone might suggest.
TemplateSpare WordPress plugin versions up to and including 4.2.2 exposes restricted functionality to subscriber-level authenticated users via a Broken Access Control flaw (CWE-862: Missing Authorization). Authenticated users holding the WordPress subscriber role - the lowest privilege tier - can bypass intended authorization gates and read data or invoke actions not intended for their role. No public exploit code and no CISA KEV listing are present at time of analysis, but the low attack complexity and network accessibility make this a realistic threat on sites that permit open registration or have untrusted subscriber accounts.
Broken Access Control in the Graphina Elementor Charts and Graphs WordPress plugin (versions up to and including 3.1.12) allows unauthenticated remote attackers to access restricted functionality or data without proper authorization. The flaw stems from missing authorization checks (CWE-862), meaning certain plugin endpoints or AJAX actions fail to verify whether the requesting user holds the necessary permissions before serving a response. Impact is limited to partial confidentiality loss with no integrity or availability consequence. No public exploit code or active exploitation has been identified at time of analysis.
Broken access control in the Civi Framework WordPress plugin (versions <= 2.2.0) allows unauthenticated remote attackers to bypass authorization checks and perform restricted actions, resulting in unauthorized integrity impact against the host WordPress site. Reported by Patchstack, this is a CWE-862 (Missing Authorization) flaw where protected endpoints fail to validate whether the requesting party has the necessary permissions. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog.
Broken Access Control in the Avada Custom Branding WordPress plugin (versions <= 1.2) allows authenticated users with contributor-level roles to access functionality or data restricted to higher-privileged roles, resulting in unauthorized information disclosure. The CVSS vector confirms network-exploitable, low-privilege exploitation with a limited confidentiality impact (C:L) and no integrity or availability consequences. No public exploit code or active exploitation has been identified at time of analysis, keeping real-world risk constrained despite the medium CVSS score.
Broken access control in the MP3 Audio Player for Music, Radio & Podcast by Sonaar WordPress plugin (versions 5.12 and earlier) permits unauthenticated remote attackers to invoke privileged plugin actions without authorization. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms no credentials or user interaction are required, though impact is bounded to low-severity integrity modification with no confidentiality or availability consequence. No public exploit code and no CISA KEV listing have been identified at the time of analysis.
Shiptastic for WooCommerce plugin (versions ≤ 5.1.0) by Vendidero exposes an Insecure Direct Object Reference (IDOR) flaw that allows unauthenticated remote attackers to access shipment or order objects belonging to other users by manipulating predictable reference parameters. The CVSS vector (PR:N/UI:N/AV:N) confirms no authentication or user interaction is required to trigger the issue, though impact is bounded to low confidentiality disclosure with no integrity or availability consequence. No active exploitation has been confirmed (not listed in CISA KEV), and no public exploit code has been identified at time of analysis.
Unauthenticated broken access control in PeproDev Ultimate Invoice WordPress plugin versions 2.2.6 and below allows remote attackers to bypass authorization checks without any credentials, resulting in limited confidentiality and integrity impact against invoice data. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms trivial remote exploitation requiring no authentication or user interaction. No public exploit code or CISA KEV listing has been identified at time of analysis, though the low attack complexity lowers the barrier for opportunistic exploitation.
Broken access control in Query Wrangler WordPress plugin version 1.5.57 and earlier allows authenticated subscriber-level users to access restricted functionality beyond their intended permissions. The CWE-862 (Missing Authorization) root cause indicates the plugin fails to verify whether the requesting user holds sufficient privileges before executing sensitive operations. No active exploitation is confirmed in CISA KEV, and CVSS rates this a medium-severity (4.3) network-exploitable issue with limited confidentiality impact and no integrity or availability consequence.
Broken access control in LA-Studio Element Kit for Elementor (versions ≤ 1.6.2) permits remote unauthenticated attackers to bypass authorization checks and access restricted content or plugin functionality on affected WordPress installations. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) confirms low-complexity, unauthenticated network exploitation with a limited confidentiality impact and no data integrity or availability consequences. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Broken access control in the Photography WordPress theme by ThemeGoods (versions ≤ 7.7.6) permits remote unauthenticated attackers to perform unauthorized integrity-impacting actions without any credentials or user interaction. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) confirms trivial network exploitability with low complexity, rooted in CWE-862 (Missing Authorization), where theme logic fails to enforce capability checks before processing sensitive requests. No public exploit has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.
Unauthenticated broken access control in the Event Post WordPress plugin (versions <= 6.0.1) allows remote attackers without any credentials to bypass authorization checks and access restricted functionality or data. Rooted in CWE-862 (Missing Authorization), the flaw is exploitable over the network with no authentication, no user interaction, and low attack complexity, making it trivially scriptable. No public exploit has been identified at time of analysis and no CISA KEV listing exists, but the unauthenticated network vector means vulnerable sites can be mass-scanned.
Unauthenticated broken access control in the Content Control WordPress plugin (versions ≤ 2.6.5) allows remote attackers to bypass content restriction rules and retrieve content intended to be hidden from public or lower-privileged users. The plugin, which provides role-based content gating for WordPress sites, fails to enforce authorization in at least one code path, permitting network access without credentials or user interaction per the CVSS:3.1/AV:N/AC:L/PR:N/UI:N vector. No public exploit code or CISA KEV listing has been identified at time of analysis, and impact is bounded to partial confidentiality loss with no integrity or availability effects.
Broken Access Control in the Style Kits WordPress plugin (versions <= 2.6.5) permits authenticated users holding Contributor-level roles to execute privileged actions without proper authorization checks, as classified under CWE-862 (Missing Authorization). Reported by Patchstack and tracked as EUVD-2026-48095, the flaw is remotely exploitable with low attack complexity and no user interaction, exposing partial confidentiality, integrity, and availability of affected WordPress installations. No public exploit code or active exploitation has been identified at time of analysis.
Broken access control in the Reviewer WordPress plugin (versions ≤ 3.14.2) allows subscriber-level authenticated users to perform actions beyond their intended authorization scope, resulting in limited integrity and availability impact on affected installations. Reported by Patchstack and tracked under EUVD-2026-48090, the flaw stems from missing authorization checks (CWE-862) on one or more plugin endpoints. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Improper input validation in Edge for Android allows a remote attacker to tamper with data over a network by convincing a user to interact with malicious content. Exploitation requires user interaction and results in low confidentiality and integrity impact, with no availability loss. No public exploit or active exploitation is known; an official vendor patch is available.
Missing authorization in the Storegrowth Sales Booster plugin for WordPress ≤2.1.0 allows unauthenticated attackers to modify the BOGO category-message configuration. The vulnerability arises from an AJAX handler that only verifies a nonce value publicly exposed on every frontend page, bypassing capability checks. There is no evidence of active exploitation or publicly available exploit code, and impact is limited to low integrity loss with no confidentiality or availability impact.
Authorization bypass in StoreGrowth for WooCommerce allows unauthenticated attackers to overwrite the spsg_popup_products option with arbitrary data. The plugin fails to properly verify user authorization, relying on a nonce that is publicly exposed to all visitors via wp_localize_script in the BoGo module. Affects all versions up to 2.1.0; no active exploitation or public exploit code identified at time of analysis.
Missing authorization in the WPBot WordPress plugin allows unauthenticated attackers to send arbitrary emails from the site's domain. Versions up to 8.5.9 are vulnerable via the wpcs_send_email() AJAX handler, which lacks nonce verification and capability checks. No active exploitation has been identified, but the flaw can be easily automated for spam or phishing campaigns.
Authenticated users of pretix can abuse the 'quick setup' view shown right after an event is created to alter configuration on events they do not have permission to manage - creating products and quotas, setting bank-transfer configuration, or linking a Stripe account. Exploitation requires a valid logged-in account (CVSS PR:L) and a well-timed, race-condition-style request (AT:P) to hit the configuration actions before the per-event permission check applies, which substantially limits reliability; the assessed vector (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N) confines impact to integrity of event configuration with no confidentiality or availability loss. All signals - a 2.3 CVSS 4.0 base score, EPSS of 0.21% (11th percentile), SSVC 'Exploitation: none / Automatable: no / Technical Impact: partial', and the absence of KEV listing or public exploit code - converge on low real-world priority, and no public exploit has been identified at time of analysis. Fixed versions are available from the vendor.
Rate-limiting bypass vulnerability in an unspecified screen-sharing application allows an attacker with local network access to brute-force the screen-sharing code, potentially displaying harmful content on the target screen. The vulnerability has a CVSS score of 3.3 (Low) with a local attack vector, though the description suggests network-adjacent access. No evidence of active exploitation or public exploit code identified at the time of analysis.
Authenticated customers of the FluentCart WordPress plugin can manipulate other users' subscriptions by exploiting missing ownership verification in payment-method endpoints. The vulnerability affects versions before 1.4.0 and allows an attacker with low privileges to change payment methods or cancel subscriptions if they know the target subscription identifier. Publicly available exploit code exists, but EPSS probability is low (0.13%) and no active exploitation in CISA KEV has been reported.
The Quiz and Survey Master WordPress plugin before version 11.1.5 permits authenticated users with contributor-level permissions to delete arbitrary output templates due to a missing capability check. Public exploit code is available, though no active exploitation has been confirmed. A vendor patch (version 11.1.5) addresses this issue.
Authorization bypass in Advanced Form Integration plugin for WordPress up to 2.6.0 allows authenticated attackers with subscriber-level access to overwrite MailUp OAuth tokens. The missing authorization check on admin_init enables token hijacking, letting attackers redirect form-submission data to a controlled MailUp account or break the integration. Exploitation requires only a subscriber account and visiting any wp-admin page, making it a low‑complexity attack with moderate impact on data integrity.
Information disclosure in ShopLentor WordPress plugin versions ≤3.4.5 allows authenticated attackers with contributor-level access to read arbitrary wp_options rows whose values are stored as arrays-of-arrays containing 'title' keys, leading to cross-plugin data leakage of internal plugin news feeds, WooCommerce block pattern transients, and third-party configuration records. The vulnerability exists due to missing authorization checks on the user-controlled 'optionSection' parameter in the plugin’s API, and no public exploit or active exploitation has been reported.
Unauthorized data access in the PDFDraft WordPress plugin allows unauthenticated attackers to download stored template PDFs containing customer PII, invoices, orders, and certificates. This is due to a missing capability check in the serveTemplatePdfAjax() function and the REST route registered with `__return_true`, affecting versions up to and including 1.1.0. No public exploit or active exploitation has been identified at the time of analysis, and the CVSS base score of 5.3 reflects the moderate but easily exploitable nature of the issue.
Broken access control in the Ad Invalid Click Protector (AICP) WordPress plugin up to version 1.3.0 allows unauthenticated attackers to manipulate plugin settings or disrupt its click-protection functionality. No active exploitation or public proof-of-concept is currently known, but the vulnerability is easily triggered over the network with no user interaction.
Unauthorized notification deletion in Prospero Flow CRM allows any authenticated user to delete other users' notifications by manipulating the ID parameter in the /notification/delete/{id} endpoint. Sequential notification IDs enable systematic deletion across the system, disrupting user awareness of critical business events. A vendor fix is available in version 5.5.3, and no active exploitation has been reported.
Information disclosure in macOS Screen Sharing allows a local attacker with low privileges to read the legacy VNC password. This issue affects macOS versions prior to 15.7.8 and 14.8.8, and could enable unauthorized remote access if VNC is enabled. No active exploitation or public exploit code has been identified.
A file quarantine bypass in macOS Gatekeeper allows maliciously crafted ZIP archives to evade security checks. Affected versions include macOS Sequoia before 15.7.8 and macOS Sonoma before 14.8.8. Exploitation is not confirmed in the wild, public exploit code has not been identified, and EPSS indicates very low likelihood of widespread attacks.
A Gatekeeper bypass in macOS allows maliciously crafted ZIP archives to evade security checks, enabling installation of untrusted applications. Affected are macOS Sonoma 14.x prior to 14.8.8 and Sequoia 15.x prior to 15.7.8; exploitation requires user interaction. No active exploitation or public exploit code is known, and a vendor patch is available.
Local information disclosure in Apple iOS and iPadOS 26.6 and earlier, as well as multiple macOS versions, allows an app to leak sensitive user data due to missing entitlement checks. The vulnerability requires user interaction and local access, but has low exploitation probability (EPSS 0.16%) and no known public exploits or active exploitation per CISA KEV.
Local access to sensitive user data in macOS allows a malicious app to bypass sandbox restrictions and read protected files or information. This issue affects all macOS versions prior to Tahoe 26.6, requires user interaction to run the malicious app (e.g., via social engineering or masquerading as legitimate software), and has no public exploit or active exploitation reported at this time.
macOS authorization bypass allows an app to access sensitive user data without proper permission, potentially triggered via malicious website in Safari
Information disclosure in macOS allows an attacker with physical access to a locked device to view sensitive user information. Affected versions include macOS Sonoma below 14.8.8, macOS Sequoia below 15.7.8, and macOS Tahoe below 26.6. No public exploit or active exploitation has been identified, and EPSS probability is very low at 0.16%, reflecting the physical access requirement.
Unauthorized file read via a sandbox escape vulnerability in Apple iOS, iPadOS, macOS, tvOS, watchOS, and visionOS allows a malicious app to access files outside its designated sandbox. Exploitation requires user interaction to install and launch a malicious app, but no active exploitation or public exploit code is currently known. CVSS medium severity (6.5) is offset by a very low EPSS score (0.17%), indicating low real-world exploitation probability.
A file quarantine bypass in Apple macOS allows a malicious application to evade Gatekeeper integrity checks. Affected versions include macOS prior to 15.7.8, 14.8.8, and 26.6. Local attackers with user interaction can leverage this to execute unsigned code that would normally be blocked, leading to potential integrity compromise.
Physical access to an iPhone or iPad running vulnerable iOS/iPadOS versions allows an attacker to access sensitive user data during the iPhone Mirroring feature due to improper state management. This issue is fixed in iOS 26.6 and iPadOS 26.6. No known exploitation in the wild; EPSS score is low (0.15%, percentile 5%).
Authentication bypass via lock screen in macOS allows a person with physical access to view contacts and photos on a locked device. The issue affects macOS prior to Sequoia 15.7.8 and Tahoe 26.6. No active exploitation or public exploit code is reported, but the vulnerability bypasses a fundamental security boundary.
Sensitive user data exposure in macOS allows a malicious app to read private information by bypassing access controls. Affected versions are prior to Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6. No public exploit or active exploitation has been identified; EPSS score of 0.16% indicates a very low probability of widespread attacks.
An inconsistent user interface state management in multiple Apple operating systems allows remote attackers to bypass network filters, potentially leading to unauthorized actions on the system. The vulnerability requires user interaction (e.g., clicking a link) and affects iOS and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. No active exploitation has been reported at this time, and the EPSS score (0.27%, 20th percentile) indicates a low immediate threat.
An authorization bypass vulnerability in Apple macOS allows a local application to access sensitive user data without proper authorization. This issue is fixed in macOS Sequoia 15.7.8 and macOS Tahoe 26.6. No active exploitation (not in CISA KEV) or public proof-of-concept has been identified, and EPSS scores the exploitation probability as low (0.15%).
Sandbox escape in macOS allows a malicious app to read files outside its sandbox. Affects macOS Sonoma prior to 14.8.8, Sequoia prior to 15.7.8, and Tahoe prior to 26.6. No active exploitation or public exploit
An authorization bypass in Apple iOS, iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS versions before 26.6 allows an app to access sensitive user data without proper permission. The vulnerability requires user interaction (opening a malicious app) and has not been actively exploited, with no CISA KEV listing and a low EPSS probability of 0.16%.
Hardcoded credentials in TP-Link router firmware allow attackers with physical access to gain unauthorized access to privileged functions, potentially leading to full device compromise. Affected models include TL-WR845N v4, TL-WR850N v3, Archer C20 v6, and Archer MR200 v5. No evidence of active exploitation or public exploit code exists at this time, and the physical access requirement limits remote exploitation risk.
Authorization bypass in JFrog Artifactory enables authenticated users with limited repository access to modify internal metadata under specific conditions, leading to integrity and availability impact. No exploitation or public proof-of-concept has been identified at this time, and EPSS data is unavailable, but the high integrity impact warrants a prompt patching response.
Improper authorization in Papra allows authenticated users to delete or rename tags belonging to other organizations. The vulnerability affects Papra versions before 26.5.0, where tag mutation endpoints fail to scope database operations to the organization in the URL. An attacker with low privileges and membership in any organization can modify or remove tags of a different organization by knowing the target tag's identifier.
Disclosure of plaintext credential secrets in Devolutions Server allows authenticated low-privileged users to access PAM password history entries via crafted API requests. Affected versions are 2026.2.4.0 through 2026.2.12.0 and 2026.1.23.0 and earlier, with vendor patches released (DEVO-2026-0026). No active exploitation or public exploit code has been identified at time of analysis.
Authorization bypass in Apache ActiveMQ 5.x before 5.19.9 and 6.x before 6.2.8 allows authenticated low-privilege users to publish messages to any queue without proper write ACLs by abusing temporary composite destinations. This enables unauthorized message injection into restricted queues, potentially disrupting message integrity and business logic. No active exploitation or public exploit code has been identified.
Improper authorization in AstrBot up to version 4.25.5 allows authenticated remote attackers to bypass tool access restrictions in the Subagent component. The flaw arises from insufficient filtering of handoff tools, exposing restricted functionality to low-privileged users. A public proof-of-concept exploit exists, though the overall severity is low (CVSS 4.0 score 2.1) and no active exploitation is reported in CISA KEV.
Authorization bypass in unitedbyai Droidclaw up to version 0.5.3 allows low-privileged remote attackers to bypass authorization checks on the Unsigned Scheduled Callback endpoint. Exploitation is difficult due to high attack complexity, but publicly available exploit code exists. The flaw can grant unauthorized access to or modification of goal data.
Incorrect authorization in AstrBot up to 4.25.5 allows remote authenticated users to bypass persona-based tool restrictions and execute unauthorized function tools. A public exploit exists, and a patch is available from the vendor. No active exploitation has been reported via CISA KEV, but the public exploit increases risk for deployments using persona tool controls.
Hardcoded credential in Ericsson Packet Core Controller (PCC) versions before 1.38 allows an attacker with cluster access to read alarm and alert information
Unauthenticated broken access control in the Gillion WordPress theme (versions ≤ 4.13) allows remote attackers to modify certain data without authentication, with no confidentiality or availability impact. The vulnerability, tracked as CVE-2026-66477, has a CVSS score of 5.3 (Low integrity). No known public exploit or active exploitation exists at this time.
Broken access control in YayPricing ≤ 3.5.6 allows authenticated subscribers to modify pricing data or cause service disruption. The vulnerability, rated medium severity (CVSS 5.4), stems from missing authorization checks in an endpoint that should be restricted to higher-privilege roles. No public exploit code or active exploitation is known at the time of analysis.
Broken access control in Visual Composer Website Builder plugin for WordPress allows authenticated attackers with low privileges (e.g., subscriber) to modify site content by bypassing authorization checks on restricted endpoints. No public exploit has been identified, and the SSVC decision framework indicates no current exploitation, making this a low-priority issue despite a CVSS 5.0 score.
An unauthenticated broken access control vulnerability in Event Tickets through version 5.29.0.1 allows remote attackers to modify event ticket data without authentication. The vulnerability affects installations of the WordPress plugin where default configurations are in place, permitting unauthorized integrity impact. No active exploitation or public exploit code has been reported at the time of this analysis.
Unauthenticated attackers can exploit broken access control in the Thrive Leads WordPress plugin (versions ≤10.9.2) to perform unauthorized modifications or disrupt functionality, with low integrity and availability impact. No public exploit or active exploitation has been reported at the time of analysis.
Broken access control in RT Mega Menu plugin for WordPress ≤1.5.1 allows authenticated subscribers to modify mega menu settings without proper authorization checks. This could lead to unauthorized changes to navigation structures, potentially facilitating phishing or content tampering. No public exploit or active exploitation reported at time of analysis.
Authenticated users holding only a Subscriber-level WordPress account can disrupt the fundraising functionality of sites running the FundEngine plugin (slug wp-fundraising-donation) through version 1.7.8, because a plugin action omits its capability and nonce authorization checks (CWE-862 missing authorization). The effect is limited to availability - there is no data disclosure or modification - and access requires an existing low-privilege login, which is realistic mainly where open user registration is enabled or the attacker already has an account. No public exploit code has been identified and there is no indication of active exploitation; EPSS is a low 0.35% (28th percentile) and CISA's SSVC framework rates exploitation as none, automatable as no, and technical impact as partial.
Missing authorization in the Events Made Easy plugin for WordPress up to version 3.1.3 permits unauthenticated remote attackers to modify event data and partially disrupt service availability without user interaction. This broken access control flaw stems from a missing capability check (CWE-862) on a REST API or AJAX endpoint, leading to low integrity and availability impact with no confidentiality loss.
Unauthenticated attachment deletion in the User Frontend WordPress plugin before 4.3.8 allows remote attackers to permanently delete author-less attachments, such as guest uploads or placeholder media. The vulnerability stems from missing ownership checks on attachment deletion requests, and a proof-of-concept exploit is publicly available. The vendor has released a patch in version 4.3.8.
Integrity bypass in The Events Calendar WordPress plugin allows unauthenticated attackers to mark existing Event Aggregator import records as failed and insert arbitrary content into a hidden comment. Public exploit code is available, and the vulnerability is automatable via the REST API, increasing the risk beyond the moderate CVSS score.
A spoofing vulnerability in Microsoft Edge (Chromium-based) allows remote attackers to bypass origin validation, enabling them to trick users into believing they are interacting with a trusted website. The flaw, tracked as CVE-2026-57978, affects all pre-patch versions of Edge and can be exploited via a malicious site with user interaction. No active exploitation or public exploit code has been identified, and Microsoft has released a patch.
Improper authorization in nanocoai NanoClaw's add_mcp_server endpoint allows authenticated attackers with low privileges to bypass access controls and perform unauthorized actions, such as adding MCP servers without proper authorization. Versions up to and including 2.0.64 are affected, and publicly available exploit code exists. A vendor patch is available via commit e5b928783d5c485637565eb07d2967922dfbf8d8.
Improper authorization in NanoClaw's MCP Server Approval component allows local attackers to bypass security controls by manipulating the createChatSdkBridge.setup function. The vulnerability affects all versions up to 2.0.64, and a public exploit is available, although no active exploitation or CISA KEV inclusion has been confirmed.
SimpleX Gateway authorization bypass in NousResearch hermes-agent 2026.6.5 allows an established SimpleX contact to authorize themselves to the agent by renaming their own profile display name to a value already present in the SIMPLEX_ALLOWED_USERS allowlist. The gateway's allowlist check matched the contact's self-asserted, remote-controlled profile name (source.user_name) alongside the numeric contactId, so any contact who guesses or knows an allowlisted display name can be treated as trusted without holding the real identity. Exploitation requires the SimpleX platform adapter to be enabled, an allowlist configured with human display names rather than numeric contactIds, a pre-existing contact relationship, and knowledge of an allowlisted name (remote, high complexity, authenticated per PR:L); publicly available exploit code exists and EPSS is only 0.23% (14th percentile), with no CISA KEV listing and no confirmed in-the-wild exploitation. Impact is limited to unauthorized authorization into the agent, not code execution.
Authorization bypass in Cloudreve WOPI integration allows view-only sessions to modify files. The WOPI access token secret is ignored, and view-created sessions can call write endpoints, enabling unintended file modification even when the viewer should be read-only. An attacker with a valid user session or control of a WOPI viewer can exploit this to overwrite files. Publicly available exploit code exists, but no active exploitation confirmed.
Metadata leakage in Cloudreve single-file shares allows an authenticated recipient to observe file activity (rename, create, delete) of unshared siblings in the owner's parent folder via the event stream endpoint, exposing file names and operation types but not file contents.
Authorization bypass in Red Hat Certificate System's CA renewal path allows an authenticated user to renew a certificate belonging to a different realm without the required realm-based authorization check. Affects versions 9, 10, and 11 of the Certificate System on Red Hat Enterprise Linux 6 through 10. No evidence of active exploitation or public exploit code exists at the time of analysis, and EPSS probability is low (0.21%).
Unauthenticated attackers can overwrite operator metadata including email and company name in lakeFS versions through 1.83.0 via the /setup_comm_prefs endpoint, potentially disabling security communications and manipulating telemetry. Exploit code is publicly available, but no active exploitation has been confirmed by CISA KEV.
A CORS misconfiguration in Jan up to version 0.8.4 allows network-adjacent attackers to bypass trusted host restrictions when the server is bound to 0.0.0.0, enabling unauthorized access to the OpenAI-compatible API for model enumeration, inference, and MCP tool invocation. A publicly available exploit exists, and CISA KEV does not list active exploitation; EPSS score is low at 0.19%, indicating limited real-world exploitation risk.
Unauthorized data access in Apache HBase thrift and rest delegation service allows an authenticated low-privilege attacker to fetch rows from scanner instances opened by other users, exposing confidential data. Versions 2.4.x through 2.5.14, 2.6.0–2.6.5, and 3.0.0-alpha-1 through beta-1 are affected. No public exploit code is known and exploitation is not reported in the wild.
Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user with the Reader role to execute automation tests and modify workflow properties due to missing server-side authorization checks. This results in privilege escalation to perform restricted operations, though the EPSS exploitation probability is low (0.15%) and no active
Information disclosure in Red Hat Build of Keycloak allows restricted administrators to view private user details (names, email addresses) via the role-users endpoint, due to a missing permission check. The flaw affects the keycloak-services library, exposing sensitive data to low-privilege users. No active exploitation or public exploit is known, and EPSS indicates low exploitation probability.
Improper access control in Octopus Deploy allows an authenticated attacker with high privileges to trigger deployments without proper authorization. Affected versions include Octopus Server 2023.0.0 through 2026.1.x before 2026.1.11587 and 2026.2.0 before 2026.2.13190. No active exploitation or public exploit code is known; EPSS indicates low exploitation probability.
Order fulfillment fraud in the Payment Plugins for Stripe WooCommerce WordPress plugin allows unauthenticated network attackers to mark arbitrary pending WooCommerce orders as paid without actual payment. Any store running version 4.0.7 or earlier with the default blank webhook secret is exposed to fraudulent goods acquisition, as the plugin's webhook endpoint accepts and processes forged Stripe charge events without signature verification. No public exploit has been identified at time of analysis, but the attack requires no credentials, targets the default installation state, and is trivially automatable.
License setting overwrite in ProfileGrid WordPress plugin versions before 5.9.9.7 allows authenticated users with Subscriber-level access or higher to overwrite premium license settings due to a missing capability check. Publicly available exploit code exists but active exploitation has not been confirmed. The flaw stems from relying solely on a nonce exposed to any logged‑in user, bypassing proper authorization.
Missing authorization checks in ProfileGrid WordPress plugin prior to 5.9.9.7 allow authenticated subscribers to manipulate private messages of other users. Attackers can soft-delete threads, alter metadata, and mark messages as read without owning the thread, impacting user privacy and data integrity. Public exploit code exists, but no active exploitation has been confirmed, and EPSS indicates very low exploitation probability (0.13%).
Authentication bypass in ProfileGrid WordPress plugin allows unauthenticated attackers to forge PayPal IPN payment notifications, granting paid membership to any group without payment. The vulnerability affects all versions before 5.9.9.7. A public proof-of-concept exploit is available, though the EPSS score (0.14%, percentile 3) indicates low likelihood of widespread exploitation at this time.
Authentication bypass in OpenStack Zaqar through version 22.0.0 allows network-reachable attackers without credentials to circumvent access controls by supplying a crafted EXTRA-SPEC HTTP header paired with a known queue UUID. The root cause is CWE-306 (Missing Authentication for Critical Function), meaning the service fails to enforce credential validation on certain request paths when this header is present. No public exploit code has been identified at time of analysis and no CISA KEV listing exists, but the network-accessible nature of Zaqar's REST API makes this a meaningful risk for deployments where queue UUIDs may be discoverable through logs or enumeration.
Rate-limiting on ZenML's login and self-password-change endpoints can be completely bypassed in versions 0.57.0 through 0.94.2 by rotating the client-supplied `X-Forwarded-For` header, enabling unthrottled brute-force credential guessing against any exposed ZenML server. The rate limiter in `rate_limit.py` keyed on the raw `X-Forwarded-For` header value rather than the verified peer address, a design that is exploitable whenever Uvicorn is launched with `--proxy-headers --forwarded-allow-ips *` - which was the Helm chart default. No active exploitation is confirmed in CISA KEV; an upstream fix commit is available but a released patched version is not independently confirmed from available data.
Unauthenticated record takeover in the Participants Database WordPress plugin (all versions ≤ 2.7.8.3) allows any remote attacker to overwrite arbitrary participant records by guessing or enumerating numeric IDs, redirect the private-access link to an attacker-controlled email, and achieve full read and edit access to victim PII including names, email addresses, and phone numbers. The attack requires no credentials - a valid nonce is freely obtainable via a plain GET request to any public page rendering the plugin's signup or record form. No CISA KEV listing or public exploit code has been identified at time of analysis, but the zero-authentication, low-complexity attack path is trivially scriptable at scale.
Unauthorized content disclosure in the Kirki - Freeform Page Builder plugin for WordPress (all versions ≤ 6.0.14) allows unauthenticated remote attackers to read the full title, body, and excerpt of any WordPress post by supplying an arbitrary post ID via the unvalidated `context` parameter in the plugin's frontend REST API. Affected content includes drafts, pending posts, privately published posts, password-protected posts, and trashed posts - bypassing all native WordPress visibility controls. No active exploitation confirmed (not in CISA KEV), and no public POC is identified at time of analysis, but the attack requires zero authentication and low complexity per the CVSS vector.
Unauthenticated webhook injection in APIFold corrupts trusted MCP server state by allowing any network client to POST arbitrary JSON payloads to the `/webhooks/:serverSlug/:eventName` endpoint, which are stored in Redis and the `webhook_events` PostgreSQL table without any signature check. All deployments prior to commit 7f19b52280f414f57af2b79a95333d1c8fbeece5 are affected; the flaw is architectural rather than misconfiguration-dependent, as signature validation was never wired into the webhook router. No public exploit code has been identified at time of analysis and CISA KEV listing is absent, but the attack requires only a valid server slug, making exploitation straightforward for targeted actors.
Insecure Direct Object Reference (IDOR) in ITFlow allows a low-privileged authenticated agent to exfiltrate plaintext credentials and TOTP secrets belonging to any client by supplying an arbitrary `credential_id` to the credential edit modal endpoint. The affected endpoint performs no client-scoping or object-level authorization check before loading and decrypting the stored credential record, making cross-client data access trivially achievable with any valid agent account. No active exploitation is confirmed (not in CISA KEV), but the high confidentiality impact (CVSS C:H) reflects the severity of exposing decrypted secrets and multi-factor authentication seeds across MSP client boundaries.
Authorization bypass in AgentGPT through 1.0.0 allows authenticated attackers to hijack other users' agent runs by supplying an arbitrary run_id in the request body, exploiting missing ownership validation in the AgentCRUD.create_task and validate_task_count functions. Successful exploitation enables task history corruption, exhaustion of per-run LLM loop budgets, and financial damage by driving API costs against the victim's account. A public proof-of-concept exists per VulnCheck reporting; no CISA KEV listing is present, and the low CVSS 4.0 score of 2.3 reflects the high attack complexity and constrained integrity/availability impact.
Authorization bypass in Overseerr's push subscription API (versions through 1.35.0) allows any authenticated user to enumerate, read, and delete the push subscriptions of arbitrary other users by supplying a target userId in path parameters - no elevated privileges required. The missing ownership check bypasses the filteredFields filter applied to normal user data access, exposing sensitive PII including email addresses and plexId values. A publicly available proof-of-concept exists; no CISA KEV listing at time of analysis.
DOMPurify versions up to and including 3.3.3 incorrectly resolves a tag-allow conflict when ADD_TAGS is used in its function form alongside FORBID_TAGS, causing forbidden tags to survive sanitization. The flaw is a short-circuit evaluation error in purify.ts (lines 1117-1123): when the ADD_TAGS callback (tagCheck) returns true for a tag, the Boolean AND short-circuits, meaning FORBID_TAGS is never consulted - directly contradicting the attribute-side behavior where FORBID_ATTR always wins. An attacker who can supply HTML to an application using this specific configuration can inject tags the developer explicitly intended to block, leading to XSS or related injection in whatever context the sanitized output is rendered. No public exploit code has been identified and the vulnerability is not listed in CISA KEV at time of analysis.
Broken access control in Cyr to Lat Reloaded (WordPress plugin by Themeisle) allows low-privileged authenticated users at the subscriber role to invoke restricted plugin actions on affected WordPress installations running version 1.3.3 and below. The flaw stems from missing authorization checks (CWE-862), permitting subscribers to perform operations intended for higher-privileged users such as editors or administrators. No public exploit code or active exploitation has been identified at time of analysis, but the low attack complexity and network accessibility via standard WordPress HTTP endpoints make it straightforward to abuse given subscriber-level access.
Broken access control in the Qubely WordPress Gutenberg block plugin (versions up to and including 1.8.14) allows unauthenticated remote attackers to bypass authorization checks and perform restricted actions, resulting in limited confidentiality and integrity compromise. The vulnerability stems from missing authorization enforcement (CWE-862) on one or more plugin endpoints exposed to the network. No public exploit code or active exploitation has been identified at time of analysis, and the CVSS vector reflects high attack complexity, tempering real-world risk below what the unauthenticated access vector alone might suggest.
TemplateSpare WordPress plugin versions up to and including 4.2.2 exposes restricted functionality to subscriber-level authenticated users via a Broken Access Control flaw (CWE-862: Missing Authorization). Authenticated users holding the WordPress subscriber role - the lowest privilege tier - can bypass intended authorization gates and read data or invoke actions not intended for their role. No public exploit code and no CISA KEV listing are present at time of analysis, but the low attack complexity and network accessibility make this a realistic threat on sites that permit open registration or have untrusted subscriber accounts.
Broken Access Control in the Graphina Elementor Charts and Graphs WordPress plugin (versions up to and including 3.1.12) allows unauthenticated remote attackers to access restricted functionality or data without proper authorization. The flaw stems from missing authorization checks (CWE-862), meaning certain plugin endpoints or AJAX actions fail to verify whether the requesting user holds the necessary permissions before serving a response. Impact is limited to partial confidentiality loss with no integrity or availability consequence. No public exploit code or active exploitation has been identified at time of analysis.
Broken access control in the Civi Framework WordPress plugin (versions <= 2.2.0) allows unauthenticated remote attackers to bypass authorization checks and perform restricted actions, resulting in unauthorized integrity impact against the host WordPress site. Reported by Patchstack, this is a CWE-862 (Missing Authorization) flaw where protected endpoints fail to validate whether the requesting party has the necessary permissions. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog.
Broken Access Control in the Avada Custom Branding WordPress plugin (versions <= 1.2) allows authenticated users with contributor-level roles to access functionality or data restricted to higher-privileged roles, resulting in unauthorized information disclosure. The CVSS vector confirms network-exploitable, low-privilege exploitation with a limited confidentiality impact (C:L) and no integrity or availability consequences. No public exploit code or active exploitation has been identified at time of analysis, keeping real-world risk constrained despite the medium CVSS score.
Broken access control in the MP3 Audio Player for Music, Radio & Podcast by Sonaar WordPress plugin (versions 5.12 and earlier) permits unauthenticated remote attackers to invoke privileged plugin actions without authorization. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms no credentials or user interaction are required, though impact is bounded to low-severity integrity modification with no confidentiality or availability consequence. No public exploit code and no CISA KEV listing have been identified at the time of analysis.
Shiptastic for WooCommerce plugin (versions ≤ 5.1.0) by Vendidero exposes an Insecure Direct Object Reference (IDOR) flaw that allows unauthenticated remote attackers to access shipment or order objects belonging to other users by manipulating predictable reference parameters. The CVSS vector (PR:N/UI:N/AV:N) confirms no authentication or user interaction is required to trigger the issue, though impact is bounded to low confidentiality disclosure with no integrity or availability consequence. No active exploitation has been confirmed (not listed in CISA KEV), and no public exploit code has been identified at time of analysis.
Unauthenticated broken access control in PeproDev Ultimate Invoice WordPress plugin versions 2.2.6 and below allows remote attackers to bypass authorization checks without any credentials, resulting in limited confidentiality and integrity impact against invoice data. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms trivial remote exploitation requiring no authentication or user interaction. No public exploit code or CISA KEV listing has been identified at time of analysis, though the low attack complexity lowers the barrier for opportunistic exploitation.
Broken access control in Query Wrangler WordPress plugin version 1.5.57 and earlier allows authenticated subscriber-level users to access restricted functionality beyond their intended permissions. The CWE-862 (Missing Authorization) root cause indicates the plugin fails to verify whether the requesting user holds sufficient privileges before executing sensitive operations. No active exploitation is confirmed in CISA KEV, and CVSS rates this a medium-severity (4.3) network-exploitable issue with limited confidentiality impact and no integrity or availability consequence.
Broken access control in LA-Studio Element Kit for Elementor (versions ≤ 1.6.2) permits remote unauthenticated attackers to bypass authorization checks and access restricted content or plugin functionality on affected WordPress installations. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) confirms low-complexity, unauthenticated network exploitation with a limited confidentiality impact and no data integrity or availability consequences. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Broken access control in the Photography WordPress theme by ThemeGoods (versions ≤ 7.7.6) permits remote unauthenticated attackers to perform unauthorized integrity-impacting actions without any credentials or user interaction. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) confirms trivial network exploitability with low complexity, rooted in CWE-862 (Missing Authorization), where theme logic fails to enforce capability checks before processing sensitive requests. No public exploit has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.
Unauthenticated broken access control in the Event Post WordPress plugin (versions <= 6.0.1) allows remote attackers without any credentials to bypass authorization checks and access restricted functionality or data. Rooted in CWE-862 (Missing Authorization), the flaw is exploitable over the network with no authentication, no user interaction, and low attack complexity, making it trivially scriptable. No public exploit has been identified at time of analysis and no CISA KEV listing exists, but the unauthenticated network vector means vulnerable sites can be mass-scanned.
Unauthenticated broken access control in the Content Control WordPress plugin (versions ≤ 2.6.5) allows remote attackers to bypass content restriction rules and retrieve content intended to be hidden from public or lower-privileged users. The plugin, which provides role-based content gating for WordPress sites, fails to enforce authorization in at least one code path, permitting network access without credentials or user interaction per the CVSS:3.1/AV:N/AC:L/PR:N/UI:N vector. No public exploit code or CISA KEV listing has been identified at time of analysis, and impact is bounded to partial confidentiality loss with no integrity or availability effects.
Broken Access Control in the Style Kits WordPress plugin (versions <= 2.6.5) permits authenticated users holding Contributor-level roles to execute privileged actions without proper authorization checks, as classified under CWE-862 (Missing Authorization). Reported by Patchstack and tracked as EUVD-2026-48095, the flaw is remotely exploitable with low attack complexity and no user interaction, exposing partial confidentiality, integrity, and availability of affected WordPress installations. No public exploit code or active exploitation has been identified at time of analysis.
Broken access control in the Reviewer WordPress plugin (versions ≤ 3.14.2) allows subscriber-level authenticated users to perform actions beyond their intended authorization scope, resulting in limited integrity and availability impact on affected installations. Reported by Patchstack and tracked under EUVD-2026-48090, the flaw stems from missing authorization checks (CWE-862) on one or more plugin endpoints. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.