tag
Cwe-862
Critical
XWiki Unauthenticated XAR Import Leading to RCE — CVE-2026-33137
CVE-2026-33137·
XWiki Platform
patched
Medium
User Registration & Membership for WordPress — Unauthenticated Admin Approval Bypass (CVE-2026-6145)
CVE-2026-6145·
User Registration & Membership for WordPress plugin
unpatched
Critical
JoomCCK Unauthenticated SQL Injection via `tags.save` (CVE-2026-49048)
CVE-2026-49048 (Advisory ID JOOMCCK-2026-001)·
JoomCCK (com_joomcck) — Content Construction Kit extension for Joomla, by JoomCoder
unpatched
High
Eventin (wp-event-solution) Broken Access Control / IDOR (CVE-2026-40776)
CVE-2026-40776 / Patchstack PSID 85de025d71e7·
Eventin — Events Calendar, Event Booking, Ticket & Registration (wp-event-solution WordPress plugin)
patched
High
Azuriom CMS Broken Access Control — Account Takeover via AzLink Server Token — CVE-2026-54415
CVE-2026-54415·
Azuriom CMS
patched
High
AutoGPT Platform Chat Session IDOR / Session Hijack — CVE-2026-30950
CVE-2026-30950 (GHSA-q58p-v9r9-7gqj)·
AutoGPT Platform (autogpt-platform-backend, chat/copilot feature)
unpatched