CVE Intelligence
Home / CVEs

CVE Database

Published vulnerabilities with severity, known exploitation and official sources.

Severity
Clear

5.301 result(s)

Export this search: RSS · CSV · STIX
CVE-2026-65531 Medium · 4.8 CWE-862 Jul 23, 2026
WordPress Qubely plugin <= 1.8.14 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Qubely <= 1.8.14 versions.
CVE-2026-65530 Medium · 4.3 CWE-862 Jul 23, 2026
WordPress TemplateSpare plugin <= 4.2.2 - Broken Access Control vulnerability
Subscriber Broken Access Control in TemplateSpare <= 4.2.2 versions.
CVE-2026-65529 Medium · 5.3 CWE-862 Jul 23, 2026
WordPress Graphina plugin <= 3.1.12 - Broken Access Control vulnerability
Missing Authorization vulnerability in Iqonic Designs Graphina – Charts and Graphs For Elementor graphina-elementor-charts-and-graphs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Graphina – Charts and Graphs For Elementor: from n/a through 3.1.12.
CVE-2026-65525 Medium · 5.3 CWE-862 Jul 23, 2026
WordPress Civi Framework plugin <= 2.2.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Civi Framework <= 2.2.0 versions.
CVE-2026-65524 Medium · 4.3 CWE-862 Jul 23, 2026
WordPress Avada Custom Branding plugin <= 1.2 - Broken Access Control vulnerability
Contributor Broken Access Control in Avada Custom Branding <= 1.2 versions.
CVE-2026-65506 Medium · 5.3 CWE-862 Jul 23, 2026
WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.12 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.12 versions.
CVE-2026-65500 High · 7.5 CWE-862 Jul 23, 2026
WordPress Manual - Documentation, Knowledge Base & Education WordPress theme theme <= 7.5.4 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Manual - Documentation, Knowledge Base & Education WordPress Theme <= 7.5.4 versions.
CVE-2026-65499 Medium · 6.5 CWE-862 Jul 23, 2026
WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in PeproDev Ultimate Invoice <= 2.2.6 versions.
CVE-2026-65495 High · 7.5 CWE-862 Jul 23, 2026
WordPress Dokan Pro plugin <= 5.0.3 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Dokan Pro <= 5.0.3 versions.
CVE-2026-65491 Medium · 4.3 CWE-862 Jul 23, 2026
WordPress Query Wrangler plugin <= 1.5.57 - Broken Access Control vulnerability
Subscriber Broken Access Control in Query Wrangler <= 1.5.57 versions.
CVE-2026-65489 Medium · 5.3 CWE-862 Jul 23, 2026
WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2.
CVE-2026-65487 Medium · 5.3 CWE-862 Jul 23, 2026
WordPress Photography theme <= 7.7.6 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Photography <= 7.7.6 versions.
CVE-2026-65486 Medium · 5.3 CWE-862 Jul 23, 2026
WordPress Event post plugin <= 6.0.1 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Event post <= 6.0.1 versions.
CVE-2026-65485 Medium · 5.3 CWE-862 Jul 23, 2026
WordPress Content Control plugin <= 2.6.5 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Content Control <= 2.6.5 versions.
CVE-2026-65484 Medium · 6.3 CWE-862 Jul 23, 2026
WordPress Style Kits plugin <= 2.6.5 - Broken Access Control vulnerability
Contributor Broken Access Control in Style Kits <= 2.6.5 versions.
CVE-2026-65479 Medium · 5.4 CWE-862 Jul 23, 2026
WordPress Reviewer plugin <= 3.14.2 - Broken Access Control vulnerability
Subscriber Broken Access Control in Reviewer <= 3.14.2 versions.
CVE-2026-65478 Medium · 5.4 CWE-862 Jul 23, 2026
WordPress ListingPro plugin <= 2.9.10 - Broken Access Control vulnerability
Subscriber Broken Access Control in ListingPro <= 2.9.10 versions.
CVE-2026-65476 Medium · 5.3 CWE-862 Jul 23, 2026
WordPress Civi theme <= 2.2.4 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Civi <= 2.2.4 versions.
CVE-2026-65472 Medium · 5.3 CWE-862 Jul 23, 2026
WordPress Kit (formerly ConvertKit) plugin <= 3.3.5 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Kit (formerly ConvertKit) <= 3.3.5 versions.
CVE-2026-65469 Medium · 5.3 CWE-862 Jul 23, 2026
WordPress AWP Classifieds plugin <= 4.4.7 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in AWP Classifieds <= 4.4.7 versions.
CVE-2026-65468 Medium · 5.3 CWE-862 Jul 23, 2026
WordPress JetBooking plugin <= 4.1.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in JetBooking <= 4.1.2 versions.
CVE-2026-65457 Medium · 4.3 CWE-862 Jul 23, 2026
WordPress ЮKassa для WooCommerce plugin <= 2.16.1 - Broken Access Control vulnerability
Subscriber Broken Access Control in ЮKassa для WooCommerce <= 2.16.1 versions.
CVE-2026-65453 Medium · 5.3 CWE-862 Jul 23, 2026
WordPress Ebook Store plugin <= 6.19 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions.
CVE-2026-65452 Medium · 5.3 CWE-862 Jul 23, 2026
WordPress Ebook Store plugin <= 6.19 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions.
CVE-2026-64814 High · 8.6 CWE-862 Jul 23, 2026
In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote...
In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session