tag
Missing-Authorization
High
YayMail WooCommerce Plugin Missing Authorization to Privilege Escalation — CVE-2026-1937
CVE-2026-1937·
YayMail – WooCommerce Email Customizer plugin for WordPress
unpatched
Medium
YAMCS Unauthorized User Enumeration via IAM API (CVE-2026-44595)
CVE-2026-44595 / GHSA-p2rj-mrmc-9w29·
yamcs-core (YAMCS mission control software)
patched
Critical
XWiki Unauthenticated XAR Import Leading to RCE — CVE-2026-33137
CVE-2026-33137·
XWiki Platform
patched
High
WordPress HT Mega (Absolute Addons for Elementor) Unauthenticated PII Disclosure (CVE-2026-4106)
CVE-2026-4106·
HT Mega – Absolute Addons for Elementor (WordPress plugin)
unpatched
Medium
WordPress Download Manager 3.3.5.2 — Unauthenticated IDOR (CVE-2026-39676)
CVE-2026-39676·
Download Manager plugin for WordPress
unpatched
Medium
User Registration & Membership for WordPress — Unauthenticated Admin Approval Bypass (CVE-2026-6145)
CVE-2026-6145·
User Registration & Membership for WordPress plugin
unpatched
High
Simple File List Plugin Unauthenticated File Modification / Path Traversal — CVE-2026-11912
CVE-2026-11912·
Simple File List WordPress plugin
patched
Critical
JoomCCK Unauthenticated SQL Injection via `tags.save` (CVE-2026-49048)
CVE-2026-49048 (Advisory ID JOOMCCK-2026-001)·
JoomCCK (com_joomcck) — Content Construction Kit extension for Joomla, by JoomCoder
unpatched
High
AutoGPT Platform Chat Session IDOR / Session Hijack — CVE-2026-30950
CVE-2026-30950 (GHSA-q58p-v9r9-7gqj)·
AutoGPT Platform (autogpt-platform-backend, chat/copilot feature)
unpatched