Known Vulnerabilities for Login Disable by Drupal
Listed below are 10 of the newest known vulnerabilities associated with "Login Disable" by "Drupal".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-111602 json | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Sens... | Not Provided | 2026-10-17 | 2026-10-18 |
| CVE-2026-110117 json | SmartAdmin through 3.30.0 contains a missing authorization vulnerability in AdminProtectController that allows authenticated ... | Not Provided | 2026-10-13 | 2026-10-13 |
| CVE-2026-109312 json | Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass in processUserProfile(), which checks that the session... | Not Provided | 2026-10-12 | 2026-10-15 |
| CVE-2026-101301 json | The WPCode WordPress plugin before 2.4.0 does not correctly verify that a request is genuinely for the login screen before en... | Not Provided | 2026-10-14 | 2026-10-14 |
| CVE-2026-101042 json | Parse Server is an open-source backend server. In versions >= 9.0.0 < 9.10.1-alpha.10 and >= 8.0.2 < 8.6.91, the code-based a... | Not Provided | 2026-09-27 | 2026-09-30 |
| CVE-2026-100169 json | Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a re... | Not Provided | 2026-10-14 | 2026-10-16 |
| CVE-2026-86796 json | The Hide My WP Ghost WordPress plugin before 7.0.11 does not verify that a request is a genuine WooCommerce request before di... | Not Provided | 2026-09-18 | 2026-09-18 |
| CVE-2026-86186 json | AVideo API fails to enforce rate limits when clients send a bot User-Agent header, allowing attackers to bypass all eight pro... | Not Provided | 2026-09-05 | 2026-09-08 |
| CVE-2026-55181 json | Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.30.3, Tugtainer's OIDC authent... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-52687 json | An attacker that has valid credentials can select a compression algorithm for the IMAP connection whose decompression state r... | Not Provided | 2026-08-28 | 2026-08-28 |