The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
8,799 vulnerabilities with CWE-862
CVE-2026-65531
MEDIUM
WordPress Qubely plugin <= 1.8.14 - Broken Access Control vulnerability
CVSS 4.8
CVE-2026-65530
MEDIUM
WordPress TemplateSpare plugin <= 4.2.2 - Broken Access Control vulnerability
CVSS 4.3
CVE-2026-65529
MEDIUM
WordPress Graphina plugin <= 3.1.12 - Broken Access Control vulnerability
CVSS 5.3
CVE-2026-65525
MEDIUM
WordPress Civi Framework plugin <= 2.2.0 - Broken Access Control vulnerability
CVSS 5.3
CVE-2026-65524
MEDIUM
WordPress Avada Custom Branding plugin <= 1.2 - Broken Access Control vulnerability
CVSS 4.3
CVE-2026-65506
MEDIUM
WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.12 - Broken Access Control vulnerability
CVSS 5.3
CVE-2026-65500
HIGH
WordPress Manual - Documentation, Knowledge Base & Education WordPress theme theme <= 7.5.4 - Broken Access Control vulnerability
CVSS 7.5
CVE-2026-65499
MEDIUM
WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Broken Access Control vulnerability
CVSS 6.5
CVE-2026-65495
HIGH
WordPress Dokan Pro plugin <= 5.0.3 - Broken Access Control vulnerability
CVSS 7.5
CVE-2026-65491
MEDIUM
WordPress Query Wrangler plugin <= 1.5.57 - Broken Access Control vulnerability
CVSS 4.3
CVE-2026-65489
MEDIUM
WordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Broken Access Control vulnerability
CVSS 5.3
CVE-2026-65487
MEDIUM
WordPress Photography theme <= 7.7.6 - Broken Access Control vulnerability
CVSS 5.3
CVE-2026-65486
MEDIUM
WordPress Event post plugin <= 6.0.1 - Broken Access Control vulnerability
CVSS 5.3
CVE-2026-65485
MEDIUM
WordPress Content Control plugin <= 2.6.5 - Broken Access Control vulnerability
CVSS 5.3
CVE-2026-65484
MEDIUM
WordPress Style Kits plugin <= 2.6.5 - Broken Access Control vulnerability
CVSS 6.3
CVE-2026-65479
MEDIUM
WordPress Reviewer plugin <= 3.14.2 - Broken Access Control vulnerability
CVSS 5.4
CVE-2026-65478
MEDIUM
WordPress ListingPro plugin <= 2.9.10 - Broken Access Control vulnerability
CVSS 5.4
CVE-2026-65476
MEDIUM
WordPress Civi theme <= 2.2.4 - Broken Access Control vulnerability
CVSS 5.3
CVE-2026-65472
MEDIUM
WordPress Kit (formerly ConvertKit) plugin <= 3.3.5 - Broken Access Control vulnerability
CVSS 5.3
CVE-2026-65469
MEDIUM
WordPress AWP Classifieds plugin <= 4.4.7 - Broken Access Control vulnerability
CVSS 5.3
CVE-2026-65468
MEDIUM
WordPress JetBooking plugin <= 4.1.2 - Broken Access Control vulnerability
CVSS 5.3
CVE-2026-65457
MEDIUM
WordPress ЮKassa для WooCommerce plugin <= 2.16.1 - Broken Access Control vulnerability
CVSS 4.3
CVE-2026-65453
MEDIUM
WordPress Ebook Store plugin <= 6.19 - Broken Access Control vulnerability
CVSS 5.3
CVE-2026-65452
MEDIUM
WordPress Ebook Store plugin <= 6.19 - Broken Access Control vulnerability
CVSS 5.3
CVE-2026-64814
HIGH
Jetbrains IntelliJ Idea < 2026.2 - Missing Authorization
CVSS 8.6
Details
Vulnerabilities
8,799
Exploit Likelihood
High