CWE-862 · Missing Authorization (page 36)
Page 36 of 100 — CVEs classified under CWE-862, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-24585 | Medium | 6.5 | 2026-01-23 | Missing Authorization vulnerability in Hyyan Abo Fakher Hyyan WooCommerce Polylang Integration woo-poly-integration allows Exploiting Incorrectly Configured Ac… |
CVE-2026-24583 | Medium | 5.3 | 2026-01-23 | Missing Authorization vulnerability in sumup SumUp Payment Gateway For WooCommerce sumup-payment-gateway-for-woocommerce allows Exploiting Incorrectly Configur… |
CVE-2026-24581 | Medium | 5.4 | 2026-01-23 | Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce points-and-rewards-for-woocommerce allows Exploiting Incorrectly Configured… |
CVE-2026-24580 | Medium | 4.3 | 2026-01-23 | Missing Authorization vulnerability in Ecwid by Lightspeed Ecommerce Shopping Cart Ecwid Shopping Cart ecwid-shopping-cart allows Exploiting Incorrectly Config… |
CVE-2026-24579 | Medium | 4.3 | 2026-01-23 | Missing Authorization vulnerability in WP Messiah Ai Image Alt Text Generator for WP ai-image-alt-text-generator-for-wp allows Exploiting Incorrectly Configure… |
CVE-2026-24578 | Medium | 4.3 | 2026-01-23 | Missing Authorization vulnerability in Jahid Hasan Admin login URL Change admin-login-url-change allows Exploiting Incorrectly Configured Access Control Securi… |
CVE-2026-24577 | Medium | 5.3 | 2026-01-23 | Missing Authorization vulnerability in Genetech Products Pie Register pie-register allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2026-24571 | Medium | 4.3 | 2026-01-23 | Missing Authorization vulnerability in boxnow BOX NOW Delivery box-now-delivery allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2026-24570 | Medium | 5.4 | 2026-01-23 | Missing Authorization vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2026-24569 | Medium | 4.3 | 2026-01-23 | Missing Authorization vulnerability in Sully Media Library File Size media-library-file-size allows Exploiting Incorrectly Configured Access Control Security L… |
CVE-2026-24568 | Medium | 5.3 | 2026-01-23 | Missing Authorization vulnerability in WP Travel WP Travel wp-travel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2026-24567 | Medium | 4.3 | 2026-01-23 | Missing Authorization vulnerability in briarinc Anything Order by Terms anything-order-by-terms allows Exploiting Incorrectly Configured Access Control Securit… |
CVE-2026-24566 | Medium | 6.5 | 2026-01-23 | Missing Authorization vulnerability in iNET iNET Webkit inet-webkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2026-24563 | Medium | 4.3 | 2026-01-23 | Missing Authorization vulnerability in Ashan Perera LifePress lifepress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2026-24562 | Medium | 5.3 | 2026-01-23 | Missing Authorization vulnerability in Ryviu Ryviu – Product Reviews for WooCommerce ryviu allows Exploiting Incorrectly Configured Access Control Security Lev… |
CVE-2026-24561 | Medium | 5.4 | 2026-01-23 | Missing Authorization vulnerability in Mahmudul Hasan Arif FluentBoards fluent-boards allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2026-24560 | Medium | 5.4 | 2026-01-23 | Missing Authorization vulnerability in Cloudinary Cloudinary cloudinary-image-management-and-manipulation-in-the-cloud-cdn allows Exploiting Incorrectly Config… |
CVE-2026-24556 | Medium | 5.3 | 2026-01-23 | Missing Authorization vulnerability in wpdive ElementCamp element-camp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2026-24551 | Medium | 5.4 | 2026-01-23 | Missing Authorization vulnerability in monetagwp Monetag Official Plugin monetag-official allows Exploiting Incorrectly Configured Access Control Security Leve… |
CVE-2026-24544 | Medium | 4.3 | 2026-01-23 | Missing Authorization vulnerability in Harmonic Design HD Quiz hd-quiz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2026-24543 | Medium | 4.3 | 2026-01-23 | Missing Authorization vulnerability in Horea Radu Materialis Companion materialis-companion allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2026-24541 | Medium | 4.3 | 2026-01-23 | Missing Authorization vulnerability in mkscripts Download After Email download-after-email allows Exploiting Incorrectly Configured Access Control Security Lev… |
CVE-2026-24540 | Medium | 5.4 | 2026-01-23 | Missing Authorization vulnerability in princeahmed Integrate Google Drive integrate-google-drive allows Exploiting Incorrectly Configured Access Control Securi… |
CVE-2026-24539 | Medium | 5.3 | 2026-01-23 | Missing Authorization vulnerability in ABCdatos Protección de datos – RGPD proteccion-datos-rgpd allows Exploiting Incorrectly Configured Access Control Securi… |
CVE-2026-24535 | Medium | 4.3 | 2026-01-23 | Missing Authorization vulnerability in webdevstudios Automatic Featured Images from Videos automatic-featured-images-from-videos allows Exploiting Incorrectly… |
CVE-2026-24534 | Medium | 4.3 | 2026-01-23 | Missing Authorization vulnerability in uPress Booter booter-bots-crawlers-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2026-24532 | Medium | 4.3 | 2026-01-23 | Missing Authorization vulnerability in SiteLock SiteLock Security – WP Hardening, Login Security & Malware Scans sitelock allows Exploiting Incorrectly Configu… |
CVE-2026-24530 | Medium | 5.3 | 2026-01-23 | Missing Authorization vulnerability in sheepfish WebP Conversion webp-conversion allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2026-24529 | Medium | 5.3 | 2026-01-23 | Missing Authorization vulnerability in Alejandro Quick Restaurant Reservations quick-restaurant-reservations allows Exploiting Incorrectly Configured Access Co… |
CVE-2026-24525 | Medium | 5.3 | 2026-01-23 | Missing Authorization vulnerability in CloudPanel CLP Varnish Cache clp-varnish-cache allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2026-24524 | Medium | 4.3 | 2026-01-23 | Missing Authorization vulnerability in Essekia Tablesome tablesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects T… |
CVE-2026-24522 | Medium | 4.3 | 2026-01-23 | Missing Authorization vulnerability in MyThemeShop WP Subscribe wp-subscribe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2025-13921 | Medium | 4.3 | 2026-01-23 | The weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot plugin for WordPress is vulnerable to unauthorized modification or loss of data d… |
CVE-2026-0927 | Medium | 5.3 | 2026-01-23 | The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to arbitrary file uploads due to missing authorization checks in the… |
CVE-2026-20888 | Medium | 4.3 | 2026-01-22 | Gitea does not properly verify authorization when canceling scheduled auto-merges via the web interface. A user with read access to pull requests may be able t… |
CVE-2026-24388 | Medium | 4.3 | 2026-01-22 | Missing Authorization vulnerability in Ludwig You WPMasterToolKit wpmastertoolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2026-24387 | Medium | 4.3 | 2026-01-22 | Missing Authorization vulnerability in Arul Prasad J WP Quick Post Duplicator wp-quick-post-duplicator allows Exploiting Incorrectly Configured Access Control… |
CVE-2026-24386 | Medium | 4.3 | 2026-01-22 | Missing Authorization vulnerability in Element Invader Element Invader – Template Kits for Elementor elementinvader allows Exploiting Incorrectly Configured Ac… |
CVE-2026-24380 | Medium | 5.3 | 2026-01-22 | Missing Authorization vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Exploiting Incorrectly Configured Access Control Securi… |
CVE-2026-24371 | Medium | 4.3 | 2026-01-22 | Missing Authorization vulnerability in bookingalgorithms BA Book Everything ba-book-everything allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2026-24368 | Medium | 5.3 | 2026-01-22 | Missing Authorization vulnerability in ThemeOne The Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Grid… |
CVE-2026-24366 | Medium | 5.3 | 2026-01-22 | Missing Authorization vulnerability in YITHEMES YITH WooCommerce Request A Quote yith-woocommerce-request-a-quote allows Exploiting Incorrectly Configured Acce… |
CVE-2026-24358 | Medium | 4.3 | 2026-01-22 | Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Secu… |
CVE-2026-24357 | Medium | 4.3 | 2026-01-22 | Missing Authorization vulnerability in Brecht WP Recipe Maker wp-recipe-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2026-24356 | Medium | 4.9 | 2026-01-22 | Missing Authorization vulnerability in Roxnor GetGenie getgenie allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GetG… |
CVE-2026-24353 | Medium | 4.3 | 2026-01-22 | Missing Authorization vulnerability in wpeverest User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2026-23974 | Medium | 5.3 | 2026-01-22 | Missing Authorization vulnerability in uxper Golo golo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Golo: from n/… |
CVE-2026-22481 | Medium | 4.3 | 2026-01-22 | Missing Authorization vulnerability in Rasedul Haque Rumi BD Courier Order Ratio Checker bd-courier-order-ratio-checker allows Exploiting Incorrectly Configure… |
CVE-2026-22472 | Medium | 4.3 | 2026-01-22 | Missing Authorization vulnerability in hassantafreshi Easy Form Builder easy-form-builder allows Exploiting Incorrectly Configured Access Control Security Leve… |
CVE-2026-22468 | Medium | 4.3 | 2026-01-22 | Missing Authorization vulnerability in AbsolutePlugins Absolute Addons For Elementor absolute-addons allows Exploiting Incorrectly Configured Access Control Se… |
CVE-2026-22466 | Medium | 4.3 | 2026-01-22 | Missing Authorization vulnerability in Chandni Patel WP MapIt wp-mapit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2026-22461 | Medium | 5.3 | 2026-01-22 | Missing Authorization vulnerability in WebAppick CTX Feed webappick-product-feed-for-woocommerce allows Exploiting Incorrectly Configured Access Control Securi… |
CVE-2026-22458 | Medium | 4.3 | 2026-01-22 | Missing Authorization vulnerability in Mikado-Themes Wanderland wanderland allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2026-22450 | Medium | 4.3 | 2026-01-22 | Missing Authorization vulnerability in Select-Themes Don Peppe donpeppe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2026-22447 | Medium | 5.3 | 2026-01-22 | Missing Authorization vulnerability in Select-Themes Prowess prowess allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2026-22445 | Medium | 5.3 | 2026-01-22 | Missing Authorization vulnerability in Proptech Plugin Apimo Connector apimo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2026-22348 | Medium | 5.3 | 2026-01-22 | Missing Authorization vulnerability in Tasos Fel Civic Cookie Control civic-cookie-control-8 allows Exploiting Incorrectly Configured Access Control Security L… |
CVE-2025-69315 | Medium | 6.5 | 2026-01-22 | Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Contr… |
CVE-2025-69313 | High | 7.5 | 2026-01-22 | Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pos… |
CVE-2025-69311 | High | 7.6 | 2026-01-22 | Missing Authorization vulnerability in Broadstreet Broadstreet Ads broadstreet allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2025-69300 | Medium | 5.4 | 2026-01-22 | Missing Authorization vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor allows Exploiting Incorrectly Configured Access Control… |
CVE-2025-69193 | High | 7.3 | 2026-01-22 | Missing Authorization vulnerability in e-plugins WP Membership wp-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2025-69192 | High | 7.3 | 2026-01-22 | Missing Authorization vulnerability in e-plugins Real Estate Pro real-estate-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2025-69191 | High | 7.3 | 2026-01-22 | Missing Authorization vulnerability in e-plugins ListingHub listinghub allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2025-69190 | High | 7.3 | 2026-01-22 | Missing Authorization vulnerability in e-plugins Listihub listihub allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects L… |
CVE-2025-69188 | High | 7.3 | 2026-01-22 | Missing Authorization vulnerability in e-plugins fitness-trainer fitness-trainer allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2025-69187 | High | 7.3 | 2026-01-22 | Missing Authorization vulnerability in e-plugins Final User final-user allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2025-69186 | High | 7.3 | 2026-01-22 | Missing Authorization vulnerability in e-plugins Hospital Doctor Directory hospital-doctor-directory allows Exploiting Incorrectly Configured Access Control Se… |
CVE-2025-69185 | High | 7.3 | 2026-01-22 | Missing Authorization vulnerability in e-plugins Hotel Listing hotel-listing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2025-69184 | High | 7.3 | 2026-01-22 | Missing Authorization vulnerability in e-plugins Institutions Directory institutions-directory allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2025-69181 | High | 7.3 | 2026-01-22 | Missing Authorization vulnerability in e-plugins Lawyer Directory lawyer-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-69095 | Medium | 6.5 | 2026-01-22 | Missing Authorization vulnerability in designthemes Reservation Plugin dt-reservation-plugin allows Exploiting Incorrectly Configured Access Control Security L… |
CVE-2025-69052 | Critical | 9.8 | 2026-01-22 | Missing Authorization vulnerability in FmeAddons Registration & Login with Mobile Phone Number for WooCommerce registration-login-with-mobile-phone-number allo… |
CVE-2025-68911 | Medium | 6.5 | 2026-01-22 | Missing Authorization vulnerability in solacewp Solace solace allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Solace… |
CVE-2025-68896 | Medium | 6.5 | 2026-01-22 | Missing Authorization vulnerability in vrpr WDV One Page Docs wdv-one-page-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2025-68882 | High | 7.5 | 2026-01-22 | Missing Authorization vulnerability in Scalenut Scalenut scalenut allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sc… |
CVE-2025-68558 | Medium | 6.5 | 2026-01-22 | Missing Authorization vulnerability in averta Depicter Slider depicter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2025-68507 | Medium | 6.5 | 2026-01-22 | Missing Authorization vulnerability in Icegram Icegram icegram allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Icegr… |
CVE-2025-68073 | Medium | 6.5 | 2026-01-22 | Missing Authorization vulnerability in Ninja Team GDPR CCPA Compliance Support ninja-gdpr-compliance allows Exploiting Incorrectly Configured Access Control Se… |
CVE-2025-68072 | Medium | 6.5 | 2026-01-22 | Missing Authorization vulnerability in Merv Barrett Easy Property Listings easy-property-listings allows Exploiting Incorrectly Configured Access Control Secur… |
CVE-2025-68059 | High | 7.6 | 2026-01-22 | Missing Authorization vulnerability in e-plugins Hotel Listing hotel-listing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2025-68058 | High | 7.6 | 2026-01-22 | Missing Authorization vulnerability in e-plugins Institutions Directory institutions-directory allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2025-68057 | High | 7.6 | 2026-01-22 | Missing Authorization vulnerability in e-plugins Hospital Doctor Directory hospital-doctor-directory allows Exploiting Incorrectly Configured Access Control Se… |
CVE-2025-68039 | Medium | 6.5 | 2026-01-22 | Missing Authorization vulnerability in Chris Simmons WP BackItUp wp-backitup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2025-68020 | Medium | 6.5 | 2026-01-22 | Missing Authorization vulnerability in WANotifier Notifier notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2025-68019 | Medium | 6.5 | 2026-01-22 | Missing Authorization vulnerability in cleverplugins SEO Booster seo-booster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2025-68018 | Critical | 9.4 | 2026-01-22 | Missing Authorization vulnerability in StackWC Order Listener for WooCommerce woc-order-alert allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2025-68016 | Medium | 6.5 | 2026-01-22 | Missing Authorization vulnerability in Onepay Sri Lanka onepay Payment Gateway For WooCommerce onepay-payment-gateway-for-woocommerce allows Exploiting Incorre… |
CVE-2025-68013 | Medium | 6.5 | 2026-01-22 | Missing Authorization vulnerability in cardpaysolutions Payment Gateway Authorize.Net CIM for WooCommerce authnet-cim-for-woo allows Exploiting Incorrectly Con… |
CVE-2025-68009 | Medium | 6.5 | 2026-01-22 | Missing Authorization vulnerability in Codeless Slider Templates slider-templates allows Accessing Functionality Not Properly Constrained by ACLs.This issue af… |
CVE-2025-68007 | Medium | 6.5 | 2026-01-22 | Missing Authorization vulnerability in Event Espresso Event Espresso 4 Decaf event-espresso-decaf allows Exploiting Incorrectly Configured Access Control Secur… |
CVE-2025-68003 | Medium | 6.5 | 2026-01-22 | Missing Authorization vulnerability in renatoatshown Shown Connector shown-connector allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2025-67967 | High | 7.6 | 2026-01-22 | Missing Authorization vulnerability in e-plugins Lawyer Directory lawyer-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-67958 | Medium | 6.5 | 2026-01-22 | Missing Authorization vulnerability in Taxcloud TaxCloud for WooCommerce simple-sales-tax allows Exploiting Incorrectly Configured Access Control Security Leve… |
CVE-2025-67956 | High | 8.2 | 2026-01-22 | Missing Authorization vulnerability in wpeverest User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2025-67942 | Medium | 6.5 | 2026-01-22 | Missing Authorization vulnerability in peachpayments Peach Payments Gateway wc-peach-payments-gateway allows Exploiting Incorrectly Configured Access Control S… |
CVE-2025-67939 | Medium | 6.5 | 2026-01-22 | Missing Authorization vulnerability in Tickera Tickera tickera-event-ticketing-system allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2025-66143 | Medium | 5.4 | 2026-01-22 | Missing Authorization vulnerability in merkulove Crumber crumber-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2025-66142 | Medium | 5.4 | 2026-01-22 | Missing Authorization vulnerability in merkulove Comparimager for Elementor comparimager-elementor allows Exploiting Incorrectly Configured Access Control Secu… |
CVE-2025-66141 | Medium | 5.4 | 2026-01-22 | Missing Authorization vulnerability in merkulove Scroller scroller allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects S… |