Início / CVEs
Base de CVEs
Vulnerabilidades publicadas, com severidade, exploração conhecida e fontes oficiais.
CVE-2026-65495
Alta · 7.5
CWE-862 23/07/2026
WordPress Dokan Pro plugin <= 5.0.3 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Dokan Pro <= 5.0.3 versions.
CVE-2026-65491
Média · 4.3
CWE-862 23/07/2026
WordPress Query Wrangler plugin <= 1.5.57 - Broken Access Control vulnerability
Subscriber Broken Access Control in Query Wrangler <= 1.5.57 versions.
CVE-2026-65489
Média · 5.3
CWE-862 23/07/2026
WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2.
CVE-2026-65487
Média · 5.3
CWE-862 23/07/2026
WordPress Photography theme <= 7.7.6 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Photography <= 7.7.6 versions.
CVE-2026-65486
Média · 5.3
CWE-862 23/07/2026
WordPress Event post plugin <= 6.0.1 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Event post <= 6.0.1 versions.
CVE-2026-65485
Média · 5.3
CWE-862 23/07/2026
WordPress Content Control plugin <= 2.6.5 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Content Control <= 2.6.5 versions.
CVE-2026-65484
Média · 6.3
CWE-862 23/07/2026
WordPress Style Kits plugin <= 2.6.5 - Broken Access Control vulnerability
Contributor Broken Access Control in Style Kits <= 2.6.5 versions.
CVE-2026-65479
Média · 5.4
CWE-862 23/07/2026
WordPress Reviewer plugin <= 3.14.2 - Broken Access Control vulnerability
Subscriber Broken Access Control in Reviewer <= 3.14.2 versions.
CVE-2026-65478
Média · 5.4
CWE-862 23/07/2026
WordPress ListingPro plugin <= 2.9.10 - Broken Access Control vulnerability
Subscriber Broken Access Control in ListingPro <= 2.9.10 versions.
CVE-2026-65476
Média · 5.3
CWE-862 23/07/2026
WordPress Civi theme <= 2.2.4 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Civi <= 2.2.4 versions.
CVE-2026-65472
Média · 5.3
CWE-862 23/07/2026
WordPress Kit (formerly ConvertKit) plugin <= 3.3.5 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Kit (formerly ConvertKit) <= 3.3.5 versions.
CVE-2026-65469
Média · 5.3
CWE-862 23/07/2026
WordPress AWP Classifieds plugin <= 4.4.7 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in AWP Classifieds <= 4.4.7 versions.
CVE-2026-65468
Média · 5.3
CWE-862 23/07/2026
WordPress JetBooking plugin <= 4.1.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in JetBooking <= 4.1.2 versions.
CVE-2026-65457
Média · 4.3
CWE-862 23/07/2026
WordPress ЮKassa для WooCommerce plugin <= 2.16.1 - Broken Access Control vulnerability
Subscriber Broken Access Control in ЮKassa для WooCommerce <= 2.16.1 versions.
CVE-2026-65453
Média · 5.3
CWE-862 23/07/2026
WordPress Ebook Store plugin <= 6.19 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions.
CVE-2026-65452
Média · 5.3
CWE-862 23/07/2026
WordPress Ebook Store plugin <= 6.19 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions.
CVE-2026-64814
Alta · 8.6
CWE-862 23/07/2026
In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote...
In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session
CVE-2026-61973
Média · 4.3
CWE-862 23/07/2026
WordPress ShopLentor Pro plugin <= 2.8.5 - Broken Access Control vulnerability
Subscriber Broken Access Control in ShopLentor Pro <= 2.8.5 versions.
CVE-2026-61972
Média · 5.3
CWE-862 23/07/2026
WordPress ShopLentor Pro plugin <= 2.8.5 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in ShopLentor Pro <= 2.8.5 versions.
CVE-2026-61954
Alta · 7.5
CWE-862 23/07/2026
WordPress PayU India plugin <= 3.8.9 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in PayU India <= 3.8.9 versions.
CVE-2026-61943
Alta · 7.5
CWE-862 23/07/2026
WordPress WPDM – Premium Packages plugin <= 6.2.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WPDM – Premium Packages <= 6.2.0 versions.
CVE-2026-59547
Alta · 7.5
CWE-862 23/07/2026
WordPress Payment Gateway for PayPal on WooCommerce plugin <= 9.1.4 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Payment Gateway for PayPal on WooCommerce <= 9.1.4 versions.
CVE-2026-59522
Média · 6.5
CWE-862 23/07/2026
WordPress WP ERP plugin <= 1.17.5 - Broken Access Control vulnerability
Subscriber Broken Access Control in WP ERP <= 1.17.5 versions.
CVE-2026-57808
Média · 6.5
CWE-862 23/07/2026
WordPress WP EasyPay plugin <= 4.5.0 - Arbitrary Content Deletion vulnerability
Subscriber Arbitrary Content Deletion in WP EasyPay <= 4.5.0 versions.
CVE-2026-57717
Média · 6.5
CWE-862 23/07/2026
WordPress Knit Pay plugin <= 9.6.0.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Knit Pay <= 9.6.0.0 versions.