CWE-862 · Missing Authorization (page 27)
Page 27 of 92 — CVEs classified under CWE-862, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-69364 | Medium | 5.3 | 2026-01-06 | Missing Authorization vulnerability in Cloudways Breeze breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breez… |
CVE-2025-69363 | Medium | 6.5 | 2026-01-06 | Missing Authorization vulnerability in CyberChimps Responsive Addons for Elementor responsive-addons-for-elementor allows Exploiting Incorrectly Configured Acc… |
CVE-2025-69361 | Medium | 4.3 | 2026-01-06 | Missing Authorization vulnerability in PublishPress Post Expirator post-expirator allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-69359 | Medium | 5.3 | 2026-01-06 | Missing Authorization vulnerability in WPFunnels Creator LMS creatorlms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2025-69355 | Medium | 4.3 | 2026-01-06 | Missing Authorization vulnerability in Tickera Tickera tickera-event-ticketing-system allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2025-69354 | Medium | 4.3 | 2026-01-06 | Missing Authorization vulnerability in BBR Plugins Better Business Reviews better-business-reviews allows Exploiting Incorrectly Configured Access Control Secu… |
CVE-2025-69353 | Medium | 4.3 | 2026-01-06 | Missing Authorization vulnerability in Proxy & VPN Blocker Proxy & VPN Blocker proxy-vpn-blocker allows Exploiting Incorrectly Configured Access Control Securi… |
CVE-2025-69352 | Medium | 5.4 | 2026-01-06 | Missing Authorization vulnerability in StellarWP The Events Calendar the-events-calendar allows Exploiting Incorrectly Configured Access Control Security Level… |
CVE-2025-69349 | Medium | 5.4 | 2026-01-06 | Missing Authorization vulnerability in Fahad Mahmood RSS Feed Widget rss-feed-widget allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2025-69348 | Medium | 4.3 | 2026-01-06 | Missing Authorization vulnerability in CoolHappy The Events Calendar Countdown Addon countdown-for-the-events-calendar allows Exploiting Incorrectly Configured… |
CVE-2025-69346 | Medium | 4.3 | 2026-01-06 | Missing Authorization vulnerability in WPCenter AffiliateX affiliatex allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2025-69345 | Medium | 4.3 | 2026-01-06 | Missing Authorization vulnerability in BoldGrid Post and Page Builder by BoldGrid post-and-page-builder allows Exploiting Incorrectly Configured Access Control… |
CVE-2025-69341 | Medium | 5.4 | 2026-01-06 | Missing Authorization vulnerability in BuddhaThemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Exploiting Incorrectly Confi… |
CVE-2025-69336 | Medium | 4.3 | 2026-01-06 | Missing Authorization vulnerability in bdthemes Ultimate Store Kit Elementor Addons ultimate-store-kit allows Exploiting Incorrectly Configured Access Control… |
CVE-2025-69331 | Medium | 4.3 | 2026-01-06 | Missing Authorization vulnerability in Jeroen Schmit Theater for WordPress theatre allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-69327 | Medium | 4.3 | 2026-01-06 | Missing Authorization vulnerability in magepeopleteam Car Rental Manager car-rental-manager allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2025-39477 | Critical | 9.8 | 2026-01-06 | Missing Authorization vulnerability in Sfwebservice InWave Jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects InWa… |
CVE-2025-9637 | Medium | 6.5 | 2026-01-06 | The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missi… |
CVE-2025-9294 | Medium | 4.3 | 2026-01-06 | The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check… |
CVE-2025-5919 | Medium | 6.5 | 2026-01-06 | The Appointment Booking and Scheduling Calendar Plugin – WP Timetics plugin for WordPress is vulnerable to unauthorized access and modification of data due to… |
CVE-2025-13964 | Medium | 5.3 | 2026-01-06 | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the catch_lp… |
CVE-2025-13766 | Medium | 5.4 | 2026-01-06 | The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to unauthorized modification and deletion of data du… |
CVE-2025-14371 | Medium | 4.3 | 2026-01-06 | The Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI plugin for WordPress is vulnerable to unauthorized modification of data due to a missing ca… |
CVE-2025-13812 | Medium | 4.3 | 2026-01-06 | The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to unauthorized access of da… |
CVE-2025-14441 | Medium | 4.3 | 2026-01-06 | The Popupkit plugin for WordPress is vulnerable to arbitrary subscriber data deletion due to missing authorization on the DELETE `/subscribers` REST API endpoi… |
CVE-2025-14034 | Medium | 5.3 | 2026-01-06 | The ilGhera Support System for WooCommerce plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check o… |
CVE-2025-11370 | Medium | 5.3 | 2026-01-06 | The Popup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel plugin fo… |
CVE-2025-46255 | High | 7.5 | 2026-01-05 | Missing Authorization vulnerability in Marketing Fire LLC LoginWP - Pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Logi… |
CVE-2025-39561 | Medium | 6.5 | 2026-01-05 | Missing Authorization vulnerability in Marketing Fire, LLC LoginWP - Pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Log… |
CVE-2025-68850 | High | 7.5 | 2026-01-05 | Missing Authorization vulnerability in codepeople Sell Downloads sell-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2025-68547 | High | 7.5 | 2026-01-05 | Missing Authorization vulnerability in wpweb Follow My Blog Post follow-my-blog-post allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2025-31046 | Medium | 4.3 | 2026-01-05 | Missing Authorization vulnerability in WPvibes AnyWhere Elementor Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2025-12519 | Medium | 5.3 | 2026-01-05 | Missing Authorization vulnerability in Centreon Infra Monitoring (Administration parameters API endpoint modules) allows Accessing Functionality Not Properly C… |
CVE-2025-15235 | Medium | 6.5 | 2026-01-05 | QOCA aim AI Medical Cloud Platform developed by Quanta Computer has a Missing Authorization vulnerability, allowing authenticated remote attackers to modify sp… |
CVE-2025-15115 | Medium | 6.5 | 2026-01-04 | Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an authentication bypass vulnerability that allows unauthenticated attackers to access any us… |
CVE-2026-21429 | Medium | 4.3 | 2026-01-02 | Emlog is an open source website building system. In version 2.5.23, the admin can set controls which makes users unable to edit or delete their articles after… |
CVE-2025-34171 | Medium | 5.3 | 2026-01-02 | CasaOS versions up to and including 0.4.15 expose multiple unauthenticated endpoints that allow remote attackers to retrieve sensitive configuration files and… |
CVE-2025-14047 | Medium | 5.3 | 2026-01-02 | The Registration, User Profile, Membership, Content Restriction, User Directory, and Frontend Post Submission – WP User Frontend plugin for WordPress is vulner… |
CVE-2025-15406 | Medium | 6.3 | 2026-01-01 | A flaw has been found in PHPGurukul Online Course Registration up to 3.1. This affects an unknown function. This manipulation causes missing authorization. Rem… |
CVE-2025-14428 | Medium | 4.3 | 2026-01-01 | The All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs - My Sticky Elements plugin for WordPress is vulnerable to unauthori… |
CVE-2025-15405 | Medium | 4.3 | 2026-01-01 | A vulnerability was detected in PHPEMS up to 11.0. The impacted element is an unknown function. The manipulation results in cross-site request forgery. The att… |
CVE-2025-66148 | Medium | 5.4 | 2025-12-31 | Missing Authorization vulnerability in merkulove Conformer for Elementor conformer-elementor allows Exploiting Incorrectly Configured Access Control Security L… |
CVE-2025-66146 | Medium | 5.4 | 2025-12-31 | Missing Authorization vulnerability in merkulove Logger for Elementor logger-elementor allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2025-66145 | Medium | 5.4 | 2025-12-31 | Missing Authorization vulnerability in merkulove Worker for WPBakery worker-wpbakery allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2025-66144 | Medium | 5.4 | 2025-12-31 | Missing Authorization vulnerability in merkulove Worker for Elementor worker-elementor allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2025-66153 | Medium | 5.4 | 2025-12-31 | Missing Authorization vulnerability in merkulove Headinger for Elementor headinger-elementor allows Exploiting Incorrectly Configured Access Control Security L… |
CVE-2025-66152 | Medium | 5.4 | 2025-12-31 | Missing Authorization vulnerability in merkulove Criptopayer for Elementor criptopayer-elementor allows Exploiting Incorrectly Configured Access Control Securi… |
CVE-2025-66151 | Medium | 5.4 | 2025-12-31 | Missing Authorization vulnerability in merkulove Countdowner for Elementor countdowner-elementor allows Exploiting Incorrectly Configured Access Control Securi… |
CVE-2025-66150 | Medium | 5.4 | 2025-12-31 | Missing Authorization vulnerability in merkulove Appender appender allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects A… |
CVE-2025-66149 | Medium | 5.4 | 2025-12-31 | Missing Authorization vulnerability in merkulove UnGrabber ungrabber allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2025-66160 | Medium | 5.4 | 2025-12-31 | Missing Authorization vulnerability in merkulove Select Graphist for Elementor Graphist for Elementor graphist-elementor allows Exploiting Incorrectly Configu… |
CVE-2025-66159 | Medium | 5.4 | 2025-12-31 | Missing Authorization vulnerability in merkulove Walker for Elementor walker-elementor allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2025-66158 | Medium | 5.4 | 2025-12-31 | Missing Authorization vulnerability in merkulove Gmaper for Elementor gmaper-elementor allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2025-66157 | Medium | 5.4 | 2025-12-31 | Missing Authorization vulnerability in merkulove Sliper for Elementor sliper-elementor allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2025-66156 | Medium | 5.4 | 2025-12-31 | Missing Authorization vulnerability in merkulove Watcher for Elementor watcher-elementor allows Exploiting Incorrectly Configured Access Control Security Level… |
CVE-2025-66155 | Medium | 5.4 | 2025-12-31 | Missing Authorization vulnerability in merkulove Questionar for Elementor questionar-elementor allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2025-66154 | Medium | 5.4 | 2025-12-31 | Missing Authorization vulnerability in merkulove Couponer for Elementor couponer-elementor allows Exploiting Incorrectly Configured Access Control Security Lev… |
CVE-2025-63038 | Medium | 4.3 | 2025-12-31 | Missing Authorization vulnerability in Northern Beaches Websites WP Custom Admin Interface wp-custom-admin-interface allows Exploiting Incorrectly Configured A… |
CVE-2025-62874 | Medium | 4.3 | 2025-12-31 | Missing Authorization vulnerability in Alexander AnyComment anycomment allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2025-62115 | Medium | 4.3 | 2025-12-31 | Missing Authorization vulnerability in ThemeBoy Hide Plugins hide-plugins allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2025-62099 | Medium | 4.3 | 2025-12-31 | Missing Authorization vulnerability in approveme Signature Add-On for Gravity Forms gravity-signature-forms-add-on allows Exploiting Incorrectly Configured Acc… |
CVE-2025-62078 | Medium | 4.3 | 2025-12-31 | Missing Authorization vulnerability in Fahad Mahmood Easy Upload Files During Checkout easy-upload-files-during-checkout allows Exploiting Incorrectly Configur… |
CVE-2025-49339 | Medium | 4.3 | 2025-12-31 | Missing Authorization vulnerability in Digages Direct Payments WP direct-payments-wp allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2025-63004 | Medium | 4.3 | 2025-12-31 | Missing Authorization vulnerability in Skynet Technologies USA LLC All in One Accessibility all-in-one-accessibility allows Exploiting Incorrectly Configured A… |
CVE-2025-62755 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in GS Plugins GS Portfolio for Envato gs-envato-portfolio allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2025-62751 | Medium | 4.3 | 2025-12-31 | Missing Authorization vulnerability in extendthemes Vireo vireo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Vire… |
CVE-2025-62747 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in Aum Watcharapon Featured Image Generator featured-image-generator allows Exploiting Incorrectly Configured Access Contro… |
CVE-2025-62154 | Medium | 4.3 | 2025-12-31 | Missing Authorization vulnerability in recorp AI Content Writing Assistant (Content Writer, ChatGPT, Image Generator) All in One ai-content-writing-assistant a… |
CVE-2025-62150 | Medium | 4.3 | 2025-12-31 | Missing Authorization vulnerability in themesawesome History Timeline timeline-awesome allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2025-62132 | Medium | 4.3 | 2025-12-31 | Missing Authorization vulnerability in Strategy11 Team Tasty Recipes Lite tasty-recipes-lite allows Exploiting Incorrectly Configured Access Control Security L… |
CVE-2025-62131 | Medium | 4.3 | 2025-12-31 | Missing Authorization vulnerability in Strategy11 Team Tasty Recipes Lite tasty-recipes-lite allows Exploiting Incorrectly Configured Access Control Security L… |
CVE-2025-62130 | Medium | 4.3 | 2025-12-31 | Missing Authorization vulnerability in wpdiscover Accordion Slider Gallery accordion-slider-gallery allows Exploiting Incorrectly Configured Access Control Sec… |
CVE-2025-62129 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in Magnigenie RestroPress restropress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2025-62122 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in solwininfotech Trash Duplicate and 301 Redirect trash-duplicate-and-301-redirect allows Exploiting Incorrectly Configure… |
CVE-2025-62116 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in quadlayers AI Copilot ai-copilot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2025-62092 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in Wiremo Wiremo woo-reviews-by-wiremo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2025-62087 | Medium | 4.3 | 2025-12-31 | Missing Authorization vulnerability in Web Builder 143 Sticky Notes for WP Dashboard wb-sticky-notes allows Exploiting Incorrectly Configured Access Control Se… |
CVE-2025-62079 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in Damian WP Export Categories & Taxonomies wp-export-categories-taxonomies allows Exploiting Incorrectly Configured Access… |
CVE-2025-49356 | Medium | 4.3 | 2025-12-31 | Missing Authorization vulnerability in Mykola Lukin Orders Chat for WooCommerce orders-chat-for-woocommerce allows Exploiting Incorrectly Configured Access Con… |
CVE-2025-49338 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in Flowbox Flowbox flowbox allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flowb… |
CVE-2025-15390 | Medium | 6.3 | 2025-12-31 | A security flaw has been discovered in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /admin/edit-user.php. The manipulation results in… |
CVE-2025-63031 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in WP Grids EasyTest convertpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2025-63022 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in topdevs.net Simple Like Page simple-facebook-plugin allows Exploiting Incorrectly Configured Access Control Security Lev… |
CVE-2025-63016 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in quadlayers QuadLayers TikTok Feed wp-tiktok-feed allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2025-63001 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in nicdark Hotel Booking nd-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2025-62888 | Medium | 5.4 | 2025-12-31 | Missing Authorization vulnerability in Marco Milesi WP Attachments wp-attachments allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-62147 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in nikmelnik Realbig realbig-media allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2025-62145 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in NewClarity DMCA Protection Badge dmca-badge allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-62141 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in Information Technology Wawp automation-web-platform allows Exploiting Incorrectly Configured Access Control Security Lev… |
CVE-2025-62108 | Medium | 5.4 | 2025-12-31 | Missing Authorization vulnerability in SaifuMak Add Custom Codes add-custom-codes allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-62098 | Medium | 5.4 | 2025-12-31 | Missing Authorization vulnerability in totalsoft Portfolio Gallery gallery-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2025-62091 | Medium | 5.4 | 2025-12-31 | Missing Authorization vulnerability in Vollstart Serial Codes Generator and Validator with WooCommerce Support serial-codes-generator-and-validator allows Expl… |
CVE-2025-62081 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in Channelize.io Team Live Shopping & Shoppable Videos For WooCommerce live-shopping-video-streams allows Exploiting Incorr… |
CVE-2025-49349 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in Reuters News Agency Reuters Direct reuters-direct allows Exploiting Incorrectly Configured Access Control Security Level… |
CVE-2025-62144 | Medium | 5.4 | 2025-12-31 | Missing Authorization vulnerability in Mohammed Kaludi Core Web Vitals & PageSpeed Booster core-web-vitals-pagespeed-booster allows Exploiting Incorrectly Conf… |
CVE-2025-62138 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in cedcommerce WP Advanced PDF wp-advanced-pdf allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2024-58337 | Medium | 4.3 | 2025-12-30 | Akuvox Smart Intercom S539 contains an improper access control vulnerability that allows users with 'User' privileges to modify API access settings and configu… |
CVE-2023-54327 | Critical | 9.8 | 2025-12-30 | Tinycontrol LAN Controller 1.58a contains an authentication bypass vulnerability that allows unauthenticated attackers to change admin passwords through a craf… |
CVE-2025-62128 | Medium | 4.3 | 2025-12-30 | Missing Authorization vulnerability in SiteLock SiteLock Security – WP Hardening, Login Security & Malware Scans sitelock allows Exploiting Incorrectly Configu… |
CVE-2025-66080 | Medium | 5.3 | 2025-12-30 | Missing Authorization vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent gdpr-cookie-consent allows Exploiting Incorrectly Conf… |