CVE-2026-74002
5.3 MEDIUM 5.3Unauthenticated Broken Access Control in Booking Calendar <= 11.7 versions.
CVE Vulnerability Database
Complete database of CVE vulnerabilities. Track critical security threats, exploits and patches. Updated daily from NVD NIST.
CVE-2026-74000
5.3 MEDIUM 5.3Contributor Broken Access Control in Simple Membership <= 4.8.2 versions.
Contributor
Details
CVE-2026-73999
5.4 MEDIUM 5.4Contributor Insecure Direct Object References (IDOR) in Cooked <= 1.16.0 versions.
Contributor
Details
CVE-2026-71568
5.3 MEDIUM 5.3In BMCtest, Ironic is started without authentication and TLS for the duration of the test. Exploiting the problem requires winning the race with bmctest itself, which reduces the attack window …
In
Details
CVE-2026-66676
5.3 MEDIUM 5.3Unauthenticated Broken Access Control in Easy Invoice <= 2.3.8 versions.
CVE-2026-66631
7.6 HIGH 7.6Administrator SQL Injection in MC Woocommerce Wishlist <= 1.9.21 versions.
Administrator
Details
CVE-2026-66630
7.6 HIGH 7.6Administrator SQL Injection in PublishPress Series <= 3.1.3 versions.
Administrator
Details
CVE-2026-66628
7.6 HIGH 7.6Shop manager SQL Injection in WP-Lister Lite for eBay <= 3.8.11 versions.
Shop
Details
CVE-2026-66626
7.6 HIGH 7.6Editor SQL Injection in SKT Addons for Elementor <= 4.0 versions.
Editor
Details
CVE-2026-66625
7.6 HIGH 7.6Administrator SQL Injection in WC Vendors Marketplace <= 2.7.2.1 versions.
Administrator
Details
Statistics
Total
92260
Critical
9750
High
36005