Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Medium5.3Missing Authorization vulnerability in Rapid Car Check Rapid Car Check Vehicle Data free-vehicle-data-uk allows Exploiting Incorrectly Configured Access Control Securi…CVE-2026-39687 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in lvaudore The Moneytizer the-moneytizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect…CVE-2026-39685 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in Arjan Pronk linkPizza-Manager linkpizza-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This iss…CVE-2026-39682 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in MWP Development Diet Calorie Calculator diet-calorie-calculator allows Exploiting Incorrectly Configured Access Control Security…CVE-2026-39680 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in Pinpoint Booking System Pinpoint Booking System booking-system allows Exploiting Incorrectly Configured Access Control Security…CVE-2026-39678 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in Shahjada Download Manager download-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af…CVE-2026-39676 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in webmuehle Court Reservation court-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…CVE-2026-39675 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in shrikantkale iZooto izooto-web-push allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects i…CVE-2026-39673 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in shiptime ShipTime: Discounted Shipping Rates shiptime-discount-shipping allows Exploiting Incorrectly Configured Access Control…CVE-2026-39672 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in NitroPack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects NitroPack: from n/a through 1.19.3.CVE-2026-39669 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in g5theme Book Previewer for Woocommerce book-previewer-for-woocommerce allows Exploiting Incorrectly Configured Access Control Se…CVE-2026-39668 · CVE.org · NIST NVD · WordPressApr 8, 2026
Medium5.3Missing Authorization vulnerability in leadrebel Leadrebel leadrebel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Leadreb…CVE-2026-39664 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in themetechmount TrueBooker truebooker-appointment-booking allows Exploiting Incorrectly Configured Access Control Security Levels…CVE-2026-39663 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in ProWCPlugins Product Price by Formula for WooCommerce product-price-by-formula-for-woocommerce allows Exploiting Incorrectly Con…CVE-2026-39662 · CVE.org · NIST NVD · WordPressApr 8, 2026
Medium5.3Missing Authorization vulnerability in Coding Panda Panda Pods Repeater Field panda-pods-repeater-field allows Exploiting Incorrectly Configured Access Control Securit…CVE-2026-39658 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in leadlovers leadlovers forms leadlovers-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…CVE-2026-39657 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in Razorpay Razorpay for WooCommerce woo-razorpay allows Exploiting Incorrectly Configured Access Control Security Levels.This issu…CVE-2026-39656 · CVE.org · NIST NVD · WordPressApr 8, 2026
Medium4.3Missing Authorization vulnerability in Deepen Bajracharya Video Conferencing with Zoom video-conferencing-with-zoom-api allows Exploiting Incorrectly Configured Access…CVE-2026-39653 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in igms iGMS Direct Booking igms-direct-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…CVE-2026-39652 · CVE.org · NIST NVDApr 8, 2026
Medium6.5Missing Authorization vulnerability in TotalSuite Total Poll Lite totalpoll-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff…CVE-2026-39651 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in Unitech Web UnitechPay unitechpay-paiements-mobile-money allows Exploiting Incorrectly Configured Access Control Security Levels…CVE-2026-39650 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in themebeez Royale News royale-news allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Roy…CVE-2026-39649 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in themebeez Cream Blog cream-blog allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cream…CVE-2026-39648 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in Roxnor Wp Ultimate Review wp-ultimate-review allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…CVE-2026-39644 · CVE.org · NIST NVDApr 8, 2026
Medium5.3Missing Authorization vulnerability in Payment Plugins Payment Plugins for PayPal WooCommerce pymntpl-paypal-woocommerce allows Exploiting Incorrectly Configured Acces…CVE-2026-39643 · CVE.org · NIST NVD · WordPressApr 8, 2026