broken-access-control 4

• CVE-2026-104751: Rank Math SEO Unauthenticated SEO Analyzer Results Deletion Oct 13, 2026
• CVE-2026-86827: BackWPup Unauthenticated Backup Job Execution via WP-Cron Oct 12, 2026
• CVE-2026-15248: Meta Box Contributor+ Arbitrary Attachment Deletion Jul 20, 2026
• CVE-2026-14224: Easy Appointments Subscriber+ IDOR Enables Cross-User Notification Redirection Jun 13, 2026