Threat database

3 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.6	EPSS 0.2%	CVE-2026-97303Scratch & Win – Giveaways and Contests · Missing Authorization High7.6EPSS 0.2%2026-10-05CVE Database V5CVE-2026-97303 CVE-2026-97303 is a Missing Authorization vulnerability in the Apps Mav Scratch & Win – Giveaways and Contests plugin, affecting versions from initial release up to 3.0.2. The flaw allows exploitation of incorrectly configured access control security levels, potentially leading to unauthorized access. The vulnerability has a high severity with a CVSS score of 7.6. No vendor advisory or patch information is provided, so the patch status is not confirmed. EPSS 0.2%Vulnerability Apps Mav	CVE Database V5	2026-10-05
High	7.6	EPSS 0.3%	CVE-2026-97297Gratisfaction · Missing Authorization High7.6EPSS 0.3%2026-10-01CVE Database V5CVE-2026-97297 Subscriber Broken Access Control in Gratisfaction <= 4.6.3 versions. EPSS 0.3%Vulnerability Apps Mav #cwe-862	CVE Database V5	2026-10-01
High	7.6	EPSS 0.3%	CVE-2026-97277Social Boost · Missing Authorization High7.6EPSS 0.3%2026-10-01CVE Database V5CVE-2026-97277 Subscriber Broken Access Control in Social Boost <= 3.6.2 versions. EPSS 0.3%Vulnerability Apps Mav #cwe-862	CVE Database V5	2026-10-01

Showing 1–3 of 3 results