CVE-2026-39749
6.5 MEDIUM 6.5Subscriber Broken Access Control in App for Cloudflare® <= 1.10.1 versions.
Complete database of CVE vulnerabilities. Track critical security threats, exploits and patches. Updated daily from NVD NIST.
Subscriber Broken Access Control in App for Cloudflare® <= 1.10.1 versions.
Unauthenticated Cross Site Scripting (XSS) in EduMall <= 4.5.3 versions.
Subscriber SQL Injection in Woffice <= 5.4.35 versions.
Unauthenticated SQL Injection in Booknetic <= 4.8.5 versions.
Unauthenticated Cross Site Scripting (XSS) in Contact Form to DB by BestWebSoft <= 1.7.6 versions.
Unauthenticated Cross Site Scripting (XSS) in Database for CF7 <= 1.2.6 versions.
Missing Authorization vulnerability in Marcin Wise Chat wise-chat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wise Chat: from n/a through 3.4.3.
Unauthenticated Sensitive Data Exposure in Edwiser Bridge <= 4.3.4 versions.
Unauthenticated Server Side Request Forgery (SSRF) in Instapage Plugin <= 3.7.2 versions.
Subscriber Cross Site Scripting (XSS) in WC Fields Factory <= 4.1.12 versions.