CVE-2026-95594 — Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.0 versions.
Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.0 versions.
CVSS 8.1
NVD · CVE récentesCWE-266
Cyber Threat Dashboard
Cybersecurity watch: alerts, vulnerabilities, news and tools to protect yourself.
1756Items
1246Last 7 days
0Today
755Critical + high
09/10/2026 23:28Last collection
CVE-2026-48197 — Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enh…
Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Privilege Escalation.This issue affects PublishPress Capabilities: from n/a through 2.45.0.
CVSS 7.2
NVD · CVE récentesCWE-266
CVE-2026-39775 — Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme <= 2.2 versions.
Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme <= 2.2 versions.
CVSS 8.8
NVD · CVE récentesCWE-266
CVE-2026-39774 — Unauthenticated Privilege Escalation in Tourfic Pro <= 1.17.3 versions.
Unauthenticated Privilege Escalation in Tourfic Pro <= 1.17.3 versions.
CVSS 8.8
NVD · CVE récentesCWE-266
CVE-2026-39773 — Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions.
Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions.
CVSS 10
NVD · CVE récentesCWE-266
CVE-2026-39765 — Shop Manager Privilege Escalation in Challan <= 3.7.88 versions.
Shop Manager Privilege Escalation in Challan <= 3.7.88 versions.
CVSS 7.2
NVD · CVE récentesCWE-266
CVE-2026-39761 — Unauthenticated Privilege Escalation in Meta Box AIO <= 3.7.1 versions.
Unauthenticated Privilege Escalation in Meta Box AIO <= 3.7.1 versions.
CVSS 9.8
NVD · CVE récentesCWE-266
CVE-2026-39753 — Unauthenticated Privilege Escalation in Taskbot <= 6.6 versions.
Unauthenticated Privilege Escalation in Taskbot <= 6.6 versions.
CVSS 9.8
NVD · CVE récentesCWE-266
CVE-2026-105070 — Unauthenticated Privilege Escalation in Salon booking system <= 10.31.7 versions.
Unauthenticated Privilege Escalation in Salon booking system <= 10.31.7 versions.
CVSS 8.8
NVD · CVE récentesCWE-266
CVE-2026-105058 — Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions.
Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions.
CVSS 8.8
NVD · CVE récentesCWE-266
CVE-2026-104757 — Editor Privilege Escalation in Import and export users and customers <= 2.5.5 versions.
Editor Privilege Escalation in Import and export users and customers <= 2.5.5 versions.
CVSS 7.2
NVD · CVE récentesCWE-266
CVE-2026-104405 — Unauthenticated Privilege Escalation in GiveWP <= 4.17.0 versions.
Unauthenticated Privilege Escalation in GiveWP <= 4.17.0 versions.
CVSS 8.1
NVD · CVE récentesCWE-266