CVE-2026-62081Medium· 5.4▾ SunlitContributor Insecure Direct Object References (IDOR) in Flexible PDF Coupons <= 1.14.11 versions.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Contributor Insecure Direct Object References (IDOR) in Flexible PDF Coupons <= 1.14.11 versions.
flexible-coupons >= n/a <= 1.14.11Update the WordPress Flexible PDF Coupons plugin to the latest available version (at least 1.14.12).
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-62136Medium· 5.3WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.21 - Broken Access Control vulnerability
CVE-2021-46416High· 8.1Insecure direct object reference in SUNNY TRIPOWER 5.0 Firmware version 3.10.16.R leads to unauthorized user groups accessing due to insecure cookie handling.
CVE-2025-14459High· 8.5A flaw was found in KubeVirt Containerized Data Importer (CDI)
CVE-2026-20897Critical· 9.1Gitea does not properly validate repository ownership when deleting Git LFS locks
CVE-2026-103235High· 8.7MISP contains a mass assignment vulnerability in the event delegation feature
CVE-2026-103237High· 8.3MISP contains an improper input validation vulnerability in its ORM save path