CWE-862 · Missing Authorization (page 33)
Page 33 of 100 — CVEs classified under CWE-862, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-68025 | Medium | 6.5 | 2026-02-20 | Missing Authorization vulnerability in Addonify Addonify Floating Cart For WooCommerce addonify-floating-cart allows Exploiting Incorrectly Configured Access C… |
CVE-2025-68024 | Medium | 6.5 | 2026-02-20 | Missing Authorization vulnerability in Addonify Addonify – WooCommerce Wishlist addonify-wishlist allows Exploiting Incorrectly Configured Access Control Secur… |
CVE-2025-68023 | Medium | 6.5 | 2026-02-20 | Missing Authorization vulnerability in Addonify Addonify – Compare Products For WooCommerce addonify-compare-products allows Exploiting Incorrectly Configured… |
CVE-2025-68022 | High | 7.3 | 2026-02-20 | Missing Authorization vulnerability in soporteblue Plugin BlueX for WooCommerce bluex-for-woocommerce allows Exploiting Incorrectly Configured Access Control S… |
CVE-2025-68021 | Medium | 6.5 | 2026-02-20 | Missing Authorization vulnerability in ConveyThis ConveyThis conveythis-translate allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-68005 | Medium | 6.5 | 2026-02-20 | Missing Authorization vulnerability in themewant Easy Hotel Booking easy-hotel allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2025-68000 | Medium | 6.5 | 2026-02-20 | Missing Authorization vulnerability in PickPlugins Testimonial Slider testimonial allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-67994 | High | 7.5 | 2026-02-20 | Missing Authorization vulnerability in YayCommerce YayCurrency yaycurrency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2025-67993 | Medium | 6.5 | 2026-02-20 | Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2025-67977 | High | 8.2 | 2026-02-20 | Missing Authorization vulnerability in VillaTheme HAPPY happy-helpdesk-support-ticket-system allows Exploiting Incorrectly Configured Access Control Security L… |
CVE-2025-67975 | Medium | 6.5 | 2026-02-20 | Missing Authorization vulnerability in aDirectory aDirectory adirectory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2025-67974 | High | 7.5 | 2026-02-20 | Missing Authorization vulnerability in WP Legal Pages WPLegalPages wplegalpages allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2025-67973 | Medium | 6.5 | 2026-02-20 | Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Securi… |
CVE-2025-67972 | Medium | 4.3 | 2026-02-20 | Missing Authorization vulnerability in Zoho Mail Zoho ZeptoMail allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Zo… |
CVE-2025-67970 | Medium | 5.9 | 2026-02-20 | Missing Authorization vulnerability in vertim Schedula schedula-smart-appointment-booking allows Exploiting Incorrectly Configured Access Control Security Leve… |
CVE-2025-67969 | Medium | 6.5 | 2026-02-20 | Missing Authorization vulnerability in knitpay UPI QR Code Payment Gateway for WooCommerce upi-qr-code-payment-for-woocommerce allows Exploiting Incorrectly Co… |
CVE-2025-67624 | Medium | 6.5 | 2026-02-20 | Missing Authorization vulnerability in Arya Dhiratara Optimize More! – Images optimize-more-images allows Exploiting Incorrectly Configured Access Control Secu… |
CVE-2025-67547 | Medium | 6.5 | 2026-02-20 | Missing Authorization vulnerability in uixthemes Konte konte allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Konte… |
CVE-2025-53217 | High | 7.6 | 2026-02-20 | Missing Authorization vulnerability in staviravn AIO WP Builder all-in-one-wp-builder allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2024-54222 | Medium | 4.3 | 2026-02-20 | Missing Authorization vulnerability in Seraphinite Solutions Seraphinite Accelerator seraphinite-accelerator allows Retrieve Embedded Sensitive Data.This issue… |
CVE-2024-43228 | Medium | 5.3 | 2026-02-20 | Missing Authorization vulnerability in SecuPress SecuPress Free secupress.This issue affects SecuPress Free: from n/a through <= 2.2.5.3. |
CVE-2024-34438 | Medium | 5.3 | 2026-02-20 | Missing Authorization vulnerability in Anssi Laitila Shared Files shared-files.This issue affects Shared Files: from n/a through <= 1.7.19. |
CVE-2026-2819 | Medium | 6.3 | 2026-02-20 | A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.5.3. This vulnerability affects the function SaServletFilter of the file /workflow/instance/de… |
CVE-2026-26977 | Medium | 5.3 | 2026-02-20 | Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In versions 2.44.0 and below, unauthorized users are abl… |
CVE-2025-30416 | Critical | 10.0 | 2026-02-20 | Sensitive data disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before… |
CVE-2026-27387 | Medium | 5.4 | 2026-02-19 | Missing Authorization vulnerability in Designinvento DirectoryPress directorypress allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2026-27368 | Medium | 5.3 | 2026-02-19 | Missing Authorization vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon allows Exploiting Incorrectly C… |
CVE-2026-27328 | Medium | 5.3 | 2026-02-19 | Missing Authorization vulnerability in DevsBlink EduBlink edublink allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects E… |
CVE-2026-27327 | Medium | 4.3 | 2026-02-19 | Missing Authorization vulnerability in YayCommerce YayMail yaymail allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Y… |
CVE-2025-15563 | Medium | 5.3 | 2026-02-19 | Any unauthenticated user can reset the WorkTime on-prem database configuration by sending a specific HTTP request to the WorkTime server. No authorization chec… |
CVE-2026-27092 | Medium | 6.5 | 2026-02-19 | Missing Authorization vulnerability in Greg Winiarski WPAdverts wpadverts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2026-27056 | Medium | 4.3 | 2026-02-19 | Missing Authorization vulnerability in StellarWP iThemes Sync ithemes-sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2026-27055 | Medium | 4.3 | 2026-02-19 | Missing Authorization vulnerability in PenciDesign Penci AI SmartContent Creator penci-ai allows Exploiting Incorrectly Configured Access Control Security Leve… |
CVE-2026-27042 | Medium | 5.3 | 2026-02-19 | Missing Authorization vulnerability in WPDeveloper NotificationX notificationx allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2026-26358 | High | 8.8 | 2026-02-19 | Dell Unisphere for PowerMax, version(s) 10.2, contain(s) a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially… |
CVE-2026-25473 | Medium | 5.4 | 2026-02-19 | Missing Authorization vulnerability in AA-Team WZone woozone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WZone… |
CVE-2026-25459 | Medium | 4.3 | 2026-02-19 | Missing Authorization vulnerability in uixthemes Sober sober allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sober… |
CVE-2026-25441 | Medium | 5.3 | 2026-02-19 | Missing Authorization vulnerability in varunvairavanlc LeadConnector leadconnector allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2026-25423 | Low | 3.8 | 2026-02-19 | Missing Authorization vulnerability in creativeinteractivemedia Real 3D FlipBook real3d-flipbook-lite allows Exploiting Incorrectly Configured Access Control S… |
CVE-2026-25420 | Medium | 4.3 | 2026-02-19 | Missing Authorization vulnerability in MailerLite MailerLite official-mailerlite-sign-up-forms allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2026-25419 | Medium | 4.3 | 2026-02-19 | Missing Authorization vulnerability in flycart UpsellWP checkout-upsell-and-order-bumps allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2026-25416 | Medium | 4.3 | 2026-02-19 | Missing Authorization vulnerability in blazethemes News Kit Elementor Addons news-kit-elementor-addons allows Exploiting Incorrectly Configured Access Control… |
CVE-2026-25415 | Medium | 5.3 | 2026-02-19 | Missing Authorization vulnerability in iqonicdesign WPBookit Pro wpbookit-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2026-25410 | Medium | 4.3 | 2026-02-19 | Missing Authorization vulnerability in tstephenson WP-CORS wp-cors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects W… |
CVE-2026-25409 | Medium | 4.3 | 2026-02-19 | Missing Authorization vulnerability in crgeary JAMstack Deployments wp-jamstack-deployments allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2026-25408 | Medium | 5.3 | 2026-02-19 | Missing Authorization vulnerability in PluginRx Broken Link Notifier broken-link-notifier allows Exploiting Incorrectly Configured Access Control Security Leve… |
CVE-2026-25407 | Medium | 4.3 | 2026-02-19 | Missing Authorization vulnerability in cookiebot Cookiebot cookiebot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2026-25404 | Medium | 5.3 | 2026-02-19 | Missing Authorization vulnerability in Automattic WP Job Manager wp-job-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2026-25402 | Medium | 4.3 | 2026-02-19 | Missing Authorization vulnerability in echoplugins Knowledge Base for Documentation, FAQs with AI Assistance echo-knowledge-base allows Exploiting Incorrectly… |
CVE-2026-25399 | Medium | 4.3 | 2026-02-19 | Missing Authorization vulnerability in CryoutCreations Serious Slider cryout-serious-slider allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2026-25395 | Medium | 4.3 | 2026-02-19 | Missing Authorization vulnerability in ikreatethemes Business Roy business-roy allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2026-25394 | Medium | 4.3 | 2026-02-19 | Missing Authorization vulnerability in sparklewpthemes Fitness FSE fitness-fse allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2026-25393 | Medium | 4.3 | 2026-02-19 | Missing Authorization vulnerability in sparklewpthemes Hello FSE hello-fse allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2026-25391 | Medium | 5.4 | 2026-02-19 | Missing Authorization vulnerability in WP Grids WP Wand ai-content-generation allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2026-25388 | Medium | 5.4 | 2026-02-19 | Missing Authorization vulnerability in scripteo Ads Pro ap-plugin-scripteo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2026-25387 | Medium | 4.3 | 2026-02-19 | Missing Authorization vulnerability in Elementor Image Optimizer by Elementor image-optimization allows Exploiting Incorrectly Configured Access Control Securi… |
CVE-2026-25386 | Medium | 5.3 | 2026-02-19 | Missing Authorization vulnerability in Elementor Ally pojo-accessibility allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2026-25384 | Medium | 5.3 | 2026-02-19 | Missing Authorization vulnerability in WP Lab WP-Lister Lite for eBay wp-lister-for-ebay allows Exploiting Incorrectly Configured Access Control Security Level… |
CVE-2026-25375 | Medium | 4.3 | 2026-02-19 | Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Exploiting Incorrectly Configured Acc… |
CVE-2026-25374 | Medium | 5.3 | 2026-02-19 | Missing Authorization vulnerability in raratheme Spa and Salon spa-and-salon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2026-25372 | Medium | 6.5 | 2026-02-19 | Missing Authorization vulnerability in Kodezen LLC Academy LMS academy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2026-25370 | Medium | 5.3 | 2026-02-19 | Missing Authorization vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2026-25368 | Medium | 6.5 | 2026-02-19 | Missing Authorization vulnerability in codepeople Calculated Fields Form calculated-fields-form allows Exploiting Incorrectly Configured Access Control Securit… |
CVE-2026-25367 | Medium | 5.3 | 2026-02-19 | Missing Authorization vulnerability in NooTheme CitiLights noo-citilights allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2026-25364 | Medium | 5.3 | 2026-02-19 | Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access Control Sec… |
CVE-2026-25363 | Medium | 4.3 | 2026-02-19 | Missing Authorization vulnerability in FooPlugins FooGallery foogallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2026-25348 | Medium | 5.3 | 2026-02-19 | Missing Authorization vulnerability in alttextai Download Alt Text AI alttext-ai allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2026-25338 | Medium | 5.3 | 2026-02-19 | Missing Authorization vulnerability in Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS ays-chatgpt-assistant allows Exploiting Incorrectly Configu… |
CVE-2026-25336 | Medium | 5.3 | 2026-02-19 | Missing Authorization vulnerability in wpcoachify Coachify coachify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2026-25335 | Medium | 4.3 | 2026-02-19 | Missing Authorization vulnerability in Ays Pro Secure Copy Content Protection and Content Locking secure-copy-content-protection allows Exploiting Incorrectly… |
CVE-2026-25333 | Medium | 5.3 | 2026-02-19 | Missing Authorization vulnerability in peregrinethemes Shopwell shopwell allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2026-25332 | Medium | 5.3 | 2026-02-19 | Missing Authorization vulnerability in Fahad Mahmood Endless Posts Navigation endless-posts-navigation allows Exploiting Incorrectly Configured Access Control… |
CVE-2026-25330 | Medium | 4.3 | 2026-02-19 | Missing Authorization vulnerability in PublishPress PublishPress Authors publishpress-authors allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2026-25329 | Medium | 4.3 | 2026-02-19 | Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Secu… |
CVE-2026-25323 | Medium | 4.3 | 2026-02-19 | Missing Authorization vulnerability in MiKa OSM osm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects OSM: from n/a th… |
CVE-2026-25321 | Medium | 5.3 | 2026-02-19 | Missing Authorization vulnerability in PSM Plugins SupportCandy supportcandy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2026-25320 | Medium | 5.3 | 2026-02-19 | Missing Authorization vulnerability in Cool Plugins Elementor Contact Form DB sb-elementor-contact-form-db allows Exploiting Incorrectly Configured Access Cont… |
CVE-2026-25318 | Medium | 4.3 | 2026-02-19 | Missing Authorization vulnerability in Wisernotify team WiserReview Product Reviews for WooCommerce wiser-review allows Exploiting Incorrectly Configured Acces… |
CVE-2026-25315 | Medium | 5.3 | 2026-02-19 | Missing Authorization vulnerability in hcaptcha hCaptcha for WP hcaptcha-for-forms-and-more allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2026-25314 | Medium | 4.3 | 2026-02-19 | Missing Authorization vulnerability in WP Messiah TOP Table Of Contents top-table-of-contents allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2026-25313 | Medium | 4.3 | 2026-02-19 | Missing Authorization vulnerability in Shahjahan Jewel FluentForm fluentform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2026-25311 | Medium | 5.4 | 2026-02-19 | Missing Authorization vulnerability in 10up Autoshare for Twitter autoshare-for-twitter allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2026-25308 | Medium | 4.3 | 2026-02-19 | Missing Authorization vulnerability in wp.insider Simple Membership simple-membership allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2026-25003 | Medium | 4.3 | 2026-02-19 | Missing Authorization vulnerability in madalin.ungureanu Client Portal client-portal allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2026-25000 | Medium | 5.3 | 2026-02-19 | Missing Authorization vulnerability in Kraft Plugins Wheel of Life wheel-of-life allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2026-24999 | Medium | 5.3 | 2026-02-19 | Missing Authorization vulnerability in Alma Alma alma-gateway-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2026-24375 | Medium | 5.3 | 2026-02-19 | Missing Authorization vulnerability in WP Swings Ultimate Gift Cards For WooCommerce woo-gift-cards-lite allows Exploiting Incorrectly Configured Access Contro… |
CVE-2026-23804 | Medium | 5.4 | 2026-02-19 | Missing Authorization vulnerability in BBR Plugins Better Business Reviews better-business-reviews allows Exploiting Incorrectly Configured Access Control Secu… |
CVE-2026-23548 | Medium | 5.3 | 2026-02-19 | Missing Authorization vulnerability in Designinvento DirectoryPress directorypress allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2026-23547 | High | 7.1 | 2026-02-19 | Missing Authorization vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-composer allows Exploiting Incorrectly Configured Access Contr… |
CVE-2026-23545 | Medium | 6.5 | 2026-02-19 | Missing Authorization vulnerability in Aruba.it Dev Aruba HiSpeed Cache aruba-hispeed-cache allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2026-23543 | Medium | 5.3 | 2026-02-19 | Missing Authorization vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Exploiting Incorrectly Configured… |
CVE-2026-23541 | High | 7.5 | 2026-02-19 | Missing Authorization vulnerability in WPFunnels Mail Mint mail-mint allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Mail Mi… |
CVE-2026-2504 | Medium | 4.3 | 2026-02-19 | The Dealia – Request a quote plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on multiple AJAX handlers… |
CVE-2026-2284 | Medium | 5.4 | 2026-02-19 | The News Element Elementor Blog Magazine plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.8. This is due t… |
CVE-2026-25242 | Critical | 9.8 | 2026-02-19 | Gogs is an open source self-hosted Git service. Versions 0.13.4 and below expose unauthenticated file upload endpoints by default. When the global RequireSigni… |
CVE-2026-0974 | High | 8.8 | 2026-02-19 | The Orderable – WordPress Restaurant Online Ordering System and Food Ordering Plugin plugin for WordPress is vulnerable to unauthorized plugin installation due… |
CVE-2025-15041 | High | 7.2 | 2026-02-19 | The BackWPup – WordPress Backup & Restore Plugin plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation… |
CVE-2025-14864 | Medium | 4.3 | 2026-02-19 | The Virusdie - One-click website security plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.7. Thi… |
CVE-2025-14427 | Medium | 4.3 | 2026-02-19 | The Shield Security: Blocks Bots, Protects Users, and Prevents Security Breaches plugin for WordPress is vulnerable to unauthorized modification of data due to… |