PULSEUnderground Intel

LIVE57signals / 24h

FEED

ransomnetrunner reclama a P***** M***** I** · Not Foundransomemperador reclama a SitePro Rentals · Otherransomsafepay reclama a econ-tec.com · DE · Technologyransomsafepay reclama a assist2enjoy.be · BE · Otherransomlamashtu reclama a Dr Damiel Pugliese · Healthcareransomlamashtu reclama a Astidental di Sabbione · IT · Manufacturingransomlamashtu reclama a Vinco Energy · US · Energy & Utilitiesransomlamashtu reclama a Becker Logistik · DE · Transportationransomlamashtu reclama a Wilhelm Kühne · DE · Manufacturingransomlamashtu reclama a FIDUCIAL · FR · Financial Servicesransomlamashtu reclama a Virtual Ideas · AU · Technologyransomlamashtu reclama a PROJAHN · DE · Otherransomlamashtu reclama a Altmannshofer Sicherheits-Videotechnik · DE · Manufacturingransomn0n reclama a MCAP — MortgageHub commercial lending platform · CA · Financial Servicesransomnetrunner reclama a P***** M***** I** · Not Foundransomemperador reclama a SitePro Rentals · Otherransomsafepay reclama a econ-tec.com · DE · Technologyransomsafepay reclama a assist2enjoy.be · BE · Otherransomlamashtu reclama a Dr Damiel Pugliese · Healthcareransomlamashtu reclama a Astidental di Sabbione · IT · Manufacturingransomlamashtu reclama a Vinco Energy · US · Energy & Utilitiesransomlamashtu reclama a Becker Logistik · DE · Transportationransomlamashtu reclama a Wilhelm Kühne · DE · Manufacturingransomlamashtu reclama a FIDUCIAL · FR · Financial Servicesransomlamashtu reclama a Virtual Ideas · AU · Technologyransomlamashtu reclama a PROJAHN · DE · Otherransomlamashtu reclama a Altmannshofer Sicherheits-Videotechnik · DE · Manufacturingransomn0n reclama a MCAP — MortgageHub commercial lending platform · CA · Financial Services

CVE WatchSep 30, 2026

CVE-2026-97243

Subscriber Broken Access Control in AllAble Connector <= 0.13.4 versions.

CVSS

5.4

Medium

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Sep 30, 2026 · Last modified: Sep 30, 2026 · CWE-862

EPSS · 30d

Not enough EPSS history yet.

Technical description

Subscriber Broken Access Control in AllAble Connector <= 0.13.4 versions.

Official references

patchstack.comhttps://patchstack.com/database/wordpress/plugin/allable-connector/vulnerability/wordpress-allable-connector-plugin-0-13-4-broken-access-control-vulnerability?_s_id=cve

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-972855.4 MED

———Contributor Broken Access Control in The Events Calendar <= 6.17.5 versions.4h CVE-2026-972674.3 MED

———Subscriber Broken Access Control in Prevent files / folders access <= 2.6.7 versions.4h CVE-2026-972476.5 MED

———Unauthenticated Broken Access Control in Blocksy Companion <= 2.1.55 versions.4h CVE-2026-972396.5 MED

———Subscriber Broken Access Control in MCP Content Manager Lite <= 1.1.0 versions.4h CVE-2026-971977.5 HIG

———Unauthenticated Broken Access Control in WordPress Backup & Migration <= 1.6.0 versions.4h CVE-2026-968346.5 MED

———Subscriber Sensitive Data Exposure in GiveWP <= 4.16.9 versions.4h