Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: cwe-862 Clear

ID	Title	Severity	Tags	Detected
CVE-2026-65524	Contributor Broken Access Control in Avada Custom Branding <= 1.2 versions. Contributor Broken Access Control in Avada Custom Branding <= 1.2 versions.	Medium	Cwe 862	1 month ago
CVE-2026-65486	Unauthenticated Broken Access Control in Event post <= 6.0.1 versions. Unauthenticated Broken Access Control in Event post <= 6.0.1 versions.	Medium	Cwe 862	1 month ago
CVE-2026-65499	Unauthenticated Broken Access Control in PeproDev Ultimate Invoice <= 2.2.6 versions. Unauthenticated Broken Access Control in PeproDev Ultimate Invoice <= 2.2.6 versions.	Medium	Cwe 862	1 month ago
CVE-2026-65487	Unauthenticated Broken Access Control in Photography <= 7.7.6 versions. Unauthenticated Broken Access Control in Photography <= 7.7.6 versions.	Medium	Cwe 862	1 month ago
CVE-2026-65485	Unauthenticated Broken Access Control in Content Control <= 2.6.5 versions. Unauthenticated Broken Access Control in Content Control <= 2.6.5 versions.	Medium	Cwe 862	1 month ago
CVE-2026-65491	Subscriber Broken Access Control in Query Wrangler <= 1.5.57 versions. Subscriber Broken Access Control in Query Wrangler <= 1.5.57 versions.	Medium	Cwe 862	1 month ago
CVE-2026-65489	Unauthenticated Broken Access Control in LA-Studio Element Kit for Elementor <= 1.6.2 versions. Unauthenticated Broken Access Control in LA-Studio Element Kit for Elementor <= 1.6.2 versions.	Medium	Cwe 862	1 month ago
CVE-2026-65525	Unauthenticated Broken Access Control in Civi Framework <= 2.2.0 versions. Unauthenticated Broken Access Control in Civi Framework <= 2.2.0 versions.	Medium	Cwe 862	1 month ago
CVE-2026-65500	Vulnerability in wordpress (CVE-2026-65500) vulnerability in wordpress (CVE-2026-65500). Confidential information can be exposed externally.	High	WordPress Cwe 862	1 month ago
CVE-2026-65479	Subscriber Broken Access Control in Reviewer <= 3.14.2 versions. Subscriber Broken Access Control in Reviewer <= 3.14.2 versions.	Medium	Cwe 862	1 month ago
CVE-2026-65476	Unauthenticated Broken Access Control in Civi <= 2.2.4 versions. Unauthenticated Broken Access Control in Civi <= 2.2.4 versions.	Medium	Cwe 862	1 month ago
CVE-2026-65469	Unauthenticated Broken Access Control in AWP Classifieds <= 4.4.7 versions. Unauthenticated Broken Access Control in AWP Classifieds <= 4.4.7 versions.	Medium	Cwe 862	1 month ago
CVE-2026-65472	Unauthenticated Broken Access Control in Kit (formerly ConvertKit) <= 3.3.5 versions. Unauthenticated Broken Access Control in Kit (formerly ConvertKit) <= 3.3.5 versions.	Medium	Cwe 862	1 month ago
CVE-2026-65484	Contributor Broken Access Control in Style Kits <= 2.6.5 versions. Contributor Broken Access Control in Style Kits <= 2.6.5 versions.	Medium	Cwe 862	1 month ago
CVE-2026-65478	Subscriber Broken Access Control in ListingPro <= 2.9.10 versions. Subscriber Broken Access Control in ListingPro <= 2.9.10 versions.	Medium	Cwe 862	1 month ago
CVE-2026-65468	Unauthenticated Broken Access Control in JetBooking <= 4.1.2 versions. Unauthenticated Broken Access Control in JetBooking <= 4.1.2 versions.	Medium	Cwe 862	1 month ago
CVE-2026-65457	Subscriber Broken Access Control in ЮKassa для WooCommerce <= 2.16.1 versions. Subscriber Broken Access Control in ЮKassa для WooCommerce <= 2.16.1 versions.	Medium	Cwe 862	1 month ago
CVE-2026-65452	Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions. Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions.	Medium	Cwe 862	1 month ago
CVE-2026-65453	Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions. Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions.	Medium	Cwe 862	1 month ago
CVE-2026-61973	Subscriber Broken Access Control in ShopLentor Pro <= 2.8.5 versions. Subscriber Broken Access Control in ShopLentor Pro <= 2.8.5 versions.	Medium	Cwe 862	1 month ago
CVE-2026-61943	Unauthenticated Broken Access Control in WPDM – Premium Packages <= 6.2.0 versions. Unauthenticated Broken Access Control in WPDM – Premium Packages <= 6.2.0 versions.	High	Cwe 862	1 month ago
CVE-2026-64814	Vulnerability in jetbrains (CVE-2026-64814) vulnerability in jetbrains (CVE-2026-64814). Confidential information can be exposed externally.	High	Cwe 862 Jetbrains Intellij Idea	1 month ago
CVE-2026-59547	Vulnerability in CVE-2026-59547 (CVE-2026-59547) vulnerability in CVE-2026-59547 (CVE-2026-59547). Data can be tampered with by attackers.	High	Cwe 862	1 month ago
CVE-2026-61954	Unauthenticated Broken Access Control in PayU India <= 3.8.9 versions. Unauthenticated Broken Access Control in PayU India <= 3.8.9 versions.	High	Cwe 862	1 month ago
CVE-2026-61972	Unauthenticated Broken Access Control in ShopLentor Pro <= 2.8.5 versions. Unauthenticated Broken Access Control in ShopLentor Pro <= 2.8.5 versions.	Medium	Cwe 862	1 month ago
CVE-2026-57703	Subscriber Broken Access Control in Sunshine Photo Cart <= 3.6.10.1 versions. Subscriber Broken Access Control in Sunshine Photo Cart <= 3.6.10.1 versions.	Medium	Cwe 862	1 month ago
CVE-2026-57717	Unauthenticated Broken Access Control in Knit Pay <= 9.6.0.0 versions. Unauthenticated Broken Access Control in Knit Pay <= 9.6.0.0 versions.	Medium	Cwe 862	1 month ago
CVE-2026-59522	Subscriber Broken Access Control in WP ERP <= 1.17.5 versions. Subscriber Broken Access Control in WP ERP <= 1.17.5 versions.	Medium	Cwe 862	1 month ago
CVE-2026-57808	Subscriber Arbitrary Content Deletion in WP EasyPay <= 4.5.0 versions. Subscriber Arbitrary Content Deletion in WP EasyPay <= 4.5.0 versions.	Medium	Cwe 862	1 month ago
CVE-2026-57425	Unauthenticated Broken Access Control in Autopay dla WooCommerce <= 2.2.27 versions. Unauthenticated Broken Access Control in Autopay dla WooCommerce <= 2.2.27 versions.	Medium	Cwe 862	1 month ago
CVE-2026-25424	Contributor Broken Access Control in Mediavine Control Panel <= 2.10.10 versions. Contributor Broken Access Control in Mediavine Control Panel <= 2.10.10 versions.	Medium	Cwe 862	1 month ago
CVE-2026-27399	Unauthenticated Broken Access Control in MarketKing <= 2.1.40 versions. Unauthenticated Broken Access Control in MarketKing <= 2.1.40 versions.	Medium	Cwe 862	1 month ago
CVE-2026-25427	Subscriber Broken Access Control in eRoom <= 1.7.1 versions. Subscriber Broken Access Control in eRoom <= 1.7.1 versions.	Medium	Cwe 862	1 month ago
CVE-2026-27422	Unauthenticated Broken Access Control in YT Player <= 2.0.9 versions. Unauthenticated Broken Access Control in YT Player <= 2.0.9 versions.	Medium	Cwe 862	1 month ago
CVE-2026-27423	Subscriber Broken Access Control in Participants Database <= 2.7.8.4 versions. Subscriber Broken Access Control in Participants Database <= 2.7.8.4 versions.	Medium	Cwe 862	1 month ago
CVE-2026-25466	Unauthenticated Broken Access Control in WP Go Maps <= 10.1.04 versions. Unauthenticated Broken Access Control in WP Go Maps <= 10.1.04 versions.	Medium	Cwe 862	1 month ago
CVE-2026-27418	Unauthenticated Broken Access Control in WP Fast Total Search <= 1.81.282 versions. Unauthenticated Broken Access Control in WP Fast Total Search <= 1.81.282 versions.	Medium	Cwe 862	1 month ago
CVE-2026-27391	Subscriber Broken Access Control in uListing <= 2.2.0 versions. Subscriber Broken Access Control in uListing <= 2.2.0 versions.	Medium	Cwe 862	1 month ago
CVE-2026-27377	Vulnerability in wordpress (CVE-2026-27377) vulnerability in wordpress (CVE-2026-27377). Confidential information can be exposed externally.	Medium	WordPress Cwe 862	1 month ago
CVE-2026-27355	Unauthenticated Broken Access Control in Ditty <= 3.1.66 versions. Unauthenticated Broken Access Control in Ditty <= 3.1.66 versions.	Medium	Cwe 862	1 month ago
CVE-2026-27392	Contributor Broken Access Control in uListing <= 2.2.0 versions. Contributor Broken Access Control in uListing <= 2.2.0 versions.	Medium	Cwe 862	1 month ago
CVE-2026-57367	Subscriber Broken Access Control in WP Booking System < 5.12.8.1 versions. Subscriber Broken Access Control in WP Booking System < 5.12.8.1 versions.	High	Cwe 862	1 month ago
CVE-2026-15827	Vulnerability in wordpress (CVE-2026-15827) vulnerability in wordpress (CVE-2026-15827). Risk of unauthorized operations or information disclosure.	Medium	WordPress Cwe 862	1 month ago
CVE-2026-15015	Vulnerability in wordpress (CVE-2026-15015) vulnerability in wordpress (CVE-2026-15015). Successful exploitation can lead to full system takeover.	Critical	WordPress Cwe 862	1 month ago
CVE-2026-59677	Vulnerability in CVE-2026-59677 (CVE-2026-59677) vulnerability in CVE-2026-59677 (CVE-2026-59677). Risk of unauthorized operations or information disclosure.		Cwe 862	1 month ago
CVE-2026-12082	Vulnerability in wordpress (CVE-2026-12082) vulnerability in wordpress (CVE-2026-12082). Confidential information can be exposed externally.	High	WordPress Cwe 862	1 month ago
CVE-2026-13078	Vulnerability in mongodb (CVE-2026-13078) vulnerability in mongodb (CVE-2026-13078). Confidential information can be exposed externally.	High	JavaScript Cwe 862 MongoDB	1 month ago
CVE-2026-65011	Vulnerability in CVE-2026-65011 (CVE-2026-65011) vulnerability in CVE-2026-65011 (CVE-2026-65011). Risk of unauthorized operations or information disclosure. Exploitable via `POST /events/definitions/{definitionId}/duplicate`.	Medium	Cwe 862	1 month ago
CVE-2026-7328	Vulnerability in dos (CVE-2026-7328) vulnerability in dos (CVE-2026-7328). Risk of unauthorized operations or information disclosure.		Denial of Service Cwe 862	1 month ago
CVE-2026-16544	Vulnerability in CVE-2026-16544 (CVE-2026-16544) vulnerability in CVE-2026-16544 (CVE-2026-16544). Confidential information can be exposed externally.	Medium	Cwe 862	1 month ago

Vulnerabilities

🍪 About cookies