CVE-2026-39787 — Unauthenticated Broken Access Control in 10Web Social Photo Feed <= 1.4.35 versions.
Unauthenticated Broken Access Control in 10Web Social Photo Feed <= 1.4.35 versions.
CVSS 6.5
NVD · CVE récentesCWE-862
Cyber Threat Dashboard
Cybersecurity watch: alerts, vulnerabilities, news and tools to protect yourself.
1764Items
1252Last 7 days
1Today
756Critical + high
10/10/2026 03:28Last collection
CVE-2026-39762 — Missing Authorization vulnerability in Patterns In The Cloud Autoship Cloud for WooCommerce Subscription Prod…
Missing Authorization vulnerability in Patterns In The Cloud Autoship Cloud for WooCommerce Subscription Products autoship-cloud allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
CVSS 6.5
NVD · CVE récentesCWE-862
CVE-2026-39751 — Unauthenticated Broken Access Control in PayPlug for WooCommerce (Official) <= 3.1.0 versions.
Unauthenticated Broken Access Control in PayPlug for WooCommerce (Official) <= 3.1.0 versions.
CVSS 7.5
NVD · CVE récentesCWE-862
CVE-2026-39749 — Subscriber Broken Access Control in App for Cloudflare® <= 1.10.1 versions.
Subscriber Broken Access Control in App for Cloudflare® <= 1.10.1 versions.
CVSS 6.5
NVD · CVE récentesCWE-862
CVE-2026-39730 — Missing Authorization vulnerability in Marcin Wise Chat wise-chat allows Exploiting Incorrectly Configured Ac…
Missing Authorization vulnerability in Marcin Wise Chat wise-chat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wise Chat: from n/a through 3.4.3.
CVSS 7.1
NVD · CVE récentesCWE-862
CVE-2026-32578 — Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce <= 1.1.2606090 versions.
Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce <= 1.1.2606090 versions.
CVSS 7.1
NVD · CVE récentesCWE-862
CVE-2026-25433 — Subscriber Broken Access Control in WP2LEADS <= 3.5.7 versions.
Subscriber Broken Access Control in WP2LEADS <= 3.5.7 versions.
CVSS 7.1
NVD · CVE récentesCWE-862
CVE-2026-105059 — Subscriber Broken Access Control in Delete All Comments of wordpress <= 7.1 versions.
Subscriber Broken Access Control in Delete All Comments of wordpress <= 7.1 versions.
CVSS 6.5
NVD · CVE récentesCWE-862
CVE-2026-104406 — Unauthenticated Broken Access Control in picu <= 3.10.1 versions.
Unauthenticated Broken Access Control in picu <= 3.10.1 versions.
CVSS 7.3
NVD · CVE récentesCWE-862
CVE-2026-104387 — Unauthenticated Broken Access Control in PowerPress Podcasting <= 11.17.9 versions.
Unauthenticated Broken Access Control in PowerPress Podcasting <= 11.17.9 versions.
CVSS 7.2
NVD · CVE récentesCWE-862
CVE-2026-102915 — Subscriber Broken Access Control in WPO365 <= 44.1 versions.
Subscriber Broken Access Control in WPO365 <= 44.1 versions.
CVSS 8.5
NVD · CVE récentesCWE-862
CVE-2026-89289 — The Fast Courier WordPress plugin through 5.2.3 does not restrict an unauthenticated REST route that writes o…
The Fast Courier WordPress plugin through 5.2.3 does not restrict an unauthenticated REST route that writes order fulfillment data, allowing unauthenticated attackers to overwrite the courier status and customer-facing …
CVSS 5.3
NVD · CVE récentesCWE-862