CVE Database

CVE-2026-39753 Critical · 9.8 CWE-266 Oct 6, 2026

WordPress Taskbot plugin <= 6.6 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Taskbot <= 6.6 versions.

CVE-2026-105070 High · 8.8 CWE-266 Oct 6, 2026

WordPress Salon booking system plugin <= 10.31.7 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Salon booking system <= 10.31.7 versions.

CVE-2026-105058 High · 8.8 CWE-266 Oct 6, 2026

WordPress WP User Profiles plugin <= 2.7.3 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions.

CVE-2026-104757 High · 7.2 CWE-266 Oct 6, 2026

WordPress Import and export users and customers plugin <= 2.5.5 - Privilege Escalation vulnerability

Editor Privilege Escalation in Import and export users and customers <= 2.5.5 versions.

CVE-2026-104405 High · 8.1 CWE-266 Oct 6, 2026

WordPress GiveWP plugin <= 4.17.0 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in GiveWP <= 4.17.0 versions.

CVE-2026-105621 Medium · 5.4 CWE-266 Oct 6, 2026

jishenghua jshERP Financial Receipt Update AccountHeadService.java updateAccountHeadAndDetail improper authorization

A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function updateAccountHeadAndDetail of the file jshERP-boot/src/main/java/com/jsh/erp/service/AccountHeadService.java of the component Financial Receipt Update Handler. Performing a manipulation results in improper authorization. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

CVE-2026-105611 Low · 2.7 CWE-266 Oct 6, 2026

chillzhuang SpringBlade User Detail Endpoint RoleController.java improper authorization

A vulnerability was determined in chillzhuang SpringBlade up to 5.0.1. This affects an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/controller/RoleController.java of the component User Detail Endpoint. This manipulation of the argument ID causes improper authorization. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

CVE-2026-105610 Medium · 4.7 CWE-266 Oct 6, 2026

chillzhuang SpringBlade Parameter Submit Management ParamController.java improper authorization

A vulnerability was found in chillzhuang SpringBlade up to 5.0.1. The impacted element is an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/controller/ParamController.java of the component Parameter Submit Management. The manipulation of the argument initPassword results in improper authorization. It is possible to launch the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

CVE-2026-105571 High · 7.3 CWE-266 Oct 5, 2026

PickMall Lilishop Mobile Binding bindMobile improper authorization

A flaw has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown function of the file /buyer/passport/member/bindMobile of the component Mobile Binding. This manipulation of the argument Username causes improper authorization. It is possible to initiate the attack remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

CVE-2026-105382 High · 7.3 CWE-266 Oct 5, 2026

onetwothreeneth HospitalManagementSystem Account Administration controller.php update_subaccount improper authorization

A flaw has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function update_subaccount of the file php/controller.php of the component Account Administration. This manipulation of the argument user_id causes improper authorization. Remote exploitation of the attack is possible. The exploit has been published and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.

CVE-2026-105284 Critical · 10.0 CWE-266 Oct 5, 2026

Totolink A3002MU Authentication Check boa sub_40FCFC improper authorization

A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub_40FCFC of the file /bin/boa of the component Authentication Check. Executing a manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.

CVE-2026-103752 Critical · 9.8 Public exploit CWE-266 Oct 1, 2026

WordPress Authorizer plugin <= 3.15.3 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Authorizer <= 3.15.3 versions.

CVE-2026-103068 High · 8.8 CWE-266 Oct 1, 2026

WordPress ByteCoreStack – MCP Connector for AI Tools plugin <= 1.2.2 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in ByteCoreStack – MCP Connector for AI Tools <= 1.2.2 versions.

CVE-2026-103286 High · 7.3 CWE-266 Oct 1, 2026

Ghost 2.21.0 before 6.56.0 Privilege Escalation via Notifications

Ghost versions from 2.21.0 before 6.56.0 contain a privilege escalation vulnerability in the notifications system that allows low-privilege staff users to escalate to higher-privilege staff roles. Attackers with low-privilege staff access can exploit the notifications system to gain elevated privileges without proper authorization checks.

CVE-2026-103494 Medium · 6.6 CWE-266 Oct 1, 2026

In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user…

In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changes

CVE-2026-103534 Medium · 6.3 CWE-266 Oct 1, 2026

David-Crty databasement Snapshot Model snapshots SnapshotPolicy.view access control

A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the function SnapshotPolicy.viewAny/SnapshotPolicy.view of the file /api/v1/snapshots of the component Snapshot Model. This manipulation causes improper access controls. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. Upgrading to version 1.7.2 is able to address this issue. The affected component should be upgraded.

CVE-2026-103532 Medium · 5.3 CWE-266 Sep 30, 2026

immich-app Immich Shared Link Preview access.ts checkSharedLinkAccess improper authorization

A vulnerability has been found in immich-app Immich up to 2.7.5. This affects the function checkSharedLinkAccess of the file server/src/utils/access.ts of the component Shared Link Preview Handler. The manipulation of the argument Password leads to improper authorization. The attack may be initiated remotely. The reported GitHub issue was closed with the label "duplicate".

CVE-2026-102129 High · 7.2 CWE-266 Sep 30, 2026

Kiteworks Core Incorrect Privilege Assignment

A user-provisioning interface in Kiteworks Core did not verify that the requesting administrator was entitled to grant the role being assigned. An administrator whose delegated permissions covered role changes alone could therefore raise an account to full system-administrator privileges.

CVE-2026-103470 Critical · 9.3 CWE-266 Sep 30, 2026

In Internet2 Grouper before 7.5.1 (in some configurations), a user who is allowed to…

In Internet2 Grouper before 7.5.1 (in some configurations), a user who is allowed to create or edit rules in the User Interface can escalate privileges.

CVE-2026-97245 High · 7.2 CWE-266 Sep 30, 2026

WordPress SureCart plugin <= 4.7.2 - Privilege Escalation vulnerability

Shop Worker Privilege Escalation in SureCart <= 4.7.2 versions.

CVE-2026-96821 Medium · 6.3 CWE-266 Sep 30, 2026

WordPress FluentBoards plugin <= 2.0.12 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in FluentBoards <= 2.0.12 versions.

CVE-2026-96815 High · 7.2 CWE-266 Sep 30, 2026

WordPress Vitepos plugin <= 3.5.0 - Privilege Escalation vulnerability

Custom role Privilege Escalation in Vitepos <= 3.5.0 versions.

CVE-2026-96350 Critical · 9.8 CWE-266 Sep 30, 2026

WordPress Estatik plugin <= 4.3.5 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in Estatik <= 4.3.5 versions.

CVE-2026-94178 High · 7.5 CWE-266 Sep 30, 2026

WordPress Import and export users and customers plugin <= 2.5.2 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in Import and export users and customers <= 2.5.2 versions.

CVE-2026-102846 Medium · 4.7 CWE-266 Sep 29, 2026

gedelumbung HospitalManagement Configuration sistem.php simpan improper authorization

A vulnerability was detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacted is the function sistem.php::simpan of the file application/modules/admin/controllers/sistem.php of the component Configuration Handler. The manipulation of the argument tipe/title/content_setting results in improper authorization. The attack may be launched remotely. The exploit is now public and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.