Cwe-269

Simple User Registration WordPress Plugin — Unauthenticated Privilege Escalation (CVE-2025-4334) newCVE-2025-4334webCRITICAL 9.8Unverified2026-07-06Real Spaces WordPress Theme Unauthenticated Privilege Escalation via `imic_agent_register` (CVE-2025-6758) newCVE-2025-6758webCRITICAL 9.8Unverified2026-07-06Opal Estate Pro WordPress Plugin Unauthenticated Administrator Registration (CVE-2025-6934) new EPSS 25%CVE-2025-6934webCRITICAL 9.8Unverified2026-07-06Fox LMS `createOrder` Unauthenticated Privilege Escalation to Administrator (CVE-2025-14156) newCVE-2025-14156webCRITICAL 9.8Unverified2026-07-06WordPress "Import and Export Users and Customers" Plugin Privilege Escalation (CVE-2026-3629) newCVE-2026-3629webCRITICALUnverified2026-07-05User Registration & Membership Unauthenticated Admin Privilege Escalation (CVE-2026-1492) new EPSS 24%CVE-2026-1492webCRITICAL 9.8Unverified2026-07-05Masteriyo LMS Authenticated Privilege Escalation to Administrator (CVE-2026-4484) newCVE-2026-4484webHIGH 8.8Unverified2026-07-05LatePoint Calendar Booking Plugin Agent-to-Administrator Privilege Escalation — CVE-2026-6741 newCVE-2026-6741webHIGH 8.8Patched2026-07-05Easy Elements for Elementor Unauthenticated Privilege Escalation via `custom_meta` Overwrite (CVE-2026-9018) newCVE-2026-9018webHIGH 8.8Patched2026-07-05Azuriom CMS Broken Access Control — Account Takeover via AzLink Server Token — CVE-2026-54415 newCVE-2026-54415webHIGH 3.1Patched2026-07-05