CWE-862 · Missing Authorization (page 39)
Page 39 of 100 — CVEs classified under CWE-862, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-15390 | Medium | 6.3 | 2025-12-31 | A security flaw has been discovered in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /admin/edit-user.php. The manipulation results in… |
CVE-2025-63031 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in WP Grids EasyTest convertpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2025-63022 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in topdevs.net Simple Like Page simple-facebook-plugin allows Exploiting Incorrectly Configured Access Control Security Lev… |
CVE-2025-63016 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in quadlayers QuadLayers TikTok Feed wp-tiktok-feed allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2025-63001 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in nicdark Hotel Booking nd-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2025-62888 | Medium | 5.4 | 2025-12-31 | Missing Authorization vulnerability in Marco Milesi WP Attachments wp-attachments allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-62147 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in nikmelnik Realbig realbig-media allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2025-62145 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in NewClarity DMCA Protection Badge dmca-badge allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-62141 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in Information Technology Wawp automation-web-platform allows Exploiting Incorrectly Configured Access Control Security Lev… |
CVE-2025-62108 | Medium | 5.4 | 2025-12-31 | Missing Authorization vulnerability in SaifuMak Add Custom Codes add-custom-codes allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-62098 | Medium | 5.4 | 2025-12-31 | Missing Authorization vulnerability in totalsoft Portfolio Gallery gallery-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2025-62091 | Medium | 5.4 | 2025-12-31 | Missing Authorization vulnerability in Vollstart Serial Codes Generator and Validator with WooCommerce Support serial-codes-generator-and-validator allows Expl… |
CVE-2025-62081 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in Channelize.io Team Live Shopping & Shoppable Videos For WooCommerce live-shopping-video-streams allows Exploiting Incorr… |
CVE-2025-49349 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in Reuters News Agency Reuters Direct reuters-direct allows Exploiting Incorrectly Configured Access Control Security Level… |
CVE-2025-62144 | Medium | 5.4 | 2025-12-31 | Missing Authorization vulnerability in Mohammed Kaludi Core Web Vitals & PageSpeed Booster core-web-vitals-pagespeed-booster allows Exploiting Incorrectly Conf… |
CVE-2025-62138 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in cedcommerce WP Advanced PDF wp-advanced-pdf allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2024-58337 | Medium | 4.3 | 2025-12-30 | Akuvox Smart Intercom S539 contains an improper access control vulnerability that allows users with 'User' privileges to modify API access settings and configu… |
CVE-2023-54327 | Critical | 9.8 | 2025-12-30 | Tinycontrol LAN Controller 1.58a contains an authentication bypass vulnerability that allows unauthenticated attackers to change admin passwords through a craf… |
CVE-2025-62128 | Medium | 4.3 | 2025-12-30 | Missing Authorization vulnerability in SiteLock SiteLock Security – WP Hardening, Login Security & Malware Scans sitelock allows Exploiting Incorrectly Configu… |
CVE-2025-66080 | Medium | 5.3 | 2025-12-30 | Missing Authorization vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent gdpr-cookie-consent allows Exploiting Incorrectly Conf… |
CVE-2025-14426 | Medium | 4.3 | 2025-12-30 | The Strong Testimonials plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check in the 'edit_rating' function… |
CVE-2025-69093 | Medium | 5.3 | 2025-12-30 | Missing Authorization vulnerability in wpdesk ShopMagic shopmagic-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-69091 | Medium | 4.3 | 2025-12-30 | Missing Authorization vulnerability in Kraft Plugins Demo Importer Plus demo-importer-plus allows Exploiting Incorrectly Configured Access Control Security Lev… |
CVE-2025-69031 | Medium | 5.3 | 2025-12-30 | Missing Authorization vulnerability in Skywarrior Arcane arcane allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Arca… |
CVE-2025-69028 | Medium | 5.3 | 2025-12-30 | Missing Authorization vulnerability in BoldGrid weForms weforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects weFo… |
CVE-2025-69027 | Medium | 5.3 | 2025-12-30 | Missing Authorization vulnerability in tychesoftwares Product Delivery Date for WooCommerce – Lite product-delivery-date-for-woocommerce-lite allows Exploiting… |
CVE-2025-69024 | Medium | 6.5 | 2025-12-30 | Missing Authorization vulnerability in bizswoop BizPrint print-google-cloud-print-gcp-woocommerce allows Exploiting Incorrectly Configured Access Control Secur… |
CVE-2025-69023 | Medium | 4.3 | 2025-12-30 | Missing Authorization vulnerability in Marketing Fire Discussion Board wp-discussion-board allows Exploiting Incorrectly Configured Access Control Security Lev… |
CVE-2025-69022 | Medium | 5.4 | 2025-12-30 | Missing Authorization vulnerability in Weblizar - WordPress Themes & Plugin HR Management Lite hr-management-lite allows Exploiting Incorrectly Configured Acce… |
CVE-2025-69016 | Medium | 4.3 | 2025-12-30 | Missing Authorization vulnerability in averta Shortcodes and extra features for Phlox theme auxin-elements allows Exploiting Incorrectly Configured Access Cont… |
CVE-2025-69015 | Low | 3.8 | 2025-12-30 | Missing Authorization vulnerability in Automattic Crowdsignal Forms crowdsignal-forms allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2025-69013 | Medium | 4.3 | 2025-12-30 | Missing Authorization vulnerability in jetmonsters Stratum stratum allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects S… |
CVE-2025-69012 | Medium | 4.3 | 2025-12-30 | Missing Authorization vulnerability in Stephen Harris Event Organiser event-organiser allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2025-69010 | Medium | 5.3 | 2025-12-30 | Missing Authorization vulnerability in themebeez Themebeez Toolkit themebeez-toolkit allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2025-69009 | Medium | 5.3 | 2025-12-30 | Missing Authorization vulnerability in kamleshyadav Medicalequipment medicalequipment allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2025-68995 | Medium | 4.3 | 2025-12-30 | Missing Authorization vulnerability in Premio My Sticky Elements mystickyelements allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-68994 | Medium | 5.3 | 2025-12-30 | Missing Authorization vulnerability in XforWooCommerce Product Loops for WooCommerce product-loops allows Exploiting Incorrectly Configured Access Control Secu… |
CVE-2025-68993 | Medium | 5.3 | 2025-12-30 | Missing Authorization vulnerability in XforWooCommerce Share, Print and PDF Products for WooCommerce share-print-pdf-woocommerce allows Exploiting Incorrectly… |
CVE-2025-68982 | Medium | 5.3 | 2025-12-30 | Missing Authorization vulnerability in designthemes DesignThemes LMS Addon designthemes-lms-addon allows Exploiting Incorrectly Configured Access Control Secur… |
CVE-2025-68981 | Medium | 5.3 | 2025-12-30 | Missing Authorization vulnerability in designthemes HomeFix Elementor Portfolio homefix-ele-portfolio allows Exploiting Incorrectly Configured Access Control S… |
CVE-2025-68980 | Medium | 5.3 | 2025-12-30 | Missing Authorization vulnerability in designthemes WeDesignTech Portfolio wedesigntech-portfolio allows Exploiting Incorrectly Configured Access Control Secur… |
CVE-2025-68976 | Medium | 5.4 | 2025-12-30 | Missing Authorization vulnerability in Eagle-Themes Eagle Booking eagle-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2025-68498 | Medium | 6.5 | 2025-12-30 | Missing Authorization vulnerability in Crocoblock JetTabs jet-tabs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects J… |
CVE-2025-68036 | High | 7.5 | 2025-12-30 | Missing Authorization vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects… |
CVE-2023-41656 | Medium | 5.4 | 2025-12-30 | Missing Authorization vulnerability in wpdive Better Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2025-68503 | Medium | 6.5 | 2025-12-29 | Missing Authorization vulnerability in Crocoblock JetBlog jet-blog allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects J… |
CVE-2025-68861 | High | 7.1 | 2025-12-29 | Missing Authorization vulnerability in pluginoptimizer Plugin Optimizer plugin-optimizer allows Exploiting Incorrectly Configured Access Control Security Level… |
CVE-2025-15070 | Medium | 5.5 | 2025-12-29 | Exposure of Sensitive Information to an Unauthorized Actor, Missing Authorization vulnerability in Gmission Web Fax allows Authentication Abuse. This issue af… |
CVE-2025-15068 | High | 7.7 | 2025-12-29 | Missing Authorization vulnerability in Gmission Web Fax allows Authentication Abuse, Session Credential Falsification through Manipulation.This issue affects W… |
CVE-2025-15066 | Medium | 6.2 | 2025-12-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Missing Authorization vulnerability in Innorix WP allows Path Traversal.This is… |
CVE-2025-36192 | Medium | 6.7 | 2025-12-26 | IBM DS8A00( R10.1) 10.10.106.0 and IBM DS8A00 ( R10.0) 10.1.3.010.2.45.0 and IBM DS8900F ( R9.4) 89.40.83.089.42.18.089.44.5.0 IBM System Storage DS8000 could… |
CVE-2025-14913 | Medium | 5.3 | 2025-12-26 | The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to an incorre… |
CVE-2025-68920 | High | 8.9 | 2025-12-24 | C-Kermit (aka ckermit) through 10.0 Beta.12 (aka 416-beta12) before 244644d allows a remote Kermit system to overwrite files on the local system, or retrieve a… |
CVE-2025-68608 | High | 7.5 | 2025-12-24 | Missing Authorization vulnerability in DeluxeThemes Userpro userpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2025-68603 | Medium | 5.4 | 2025-12-24 | Missing Authorization vulnerability in Marketing Fire Editorial Calendar editorial-calendar allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2025-68596 | Medium | 5.3 | 2025-12-24 | Missing Authorization vulnerability in Bit Apps Bit Assist bit-assist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2025-68595 | Medium | 5.3 | 2025-12-24 | Missing Authorization vulnerability in Trustindex Widgets for Social Photo Feed social-photo-feed-widget allows Exploiting Incorrectly Configured Access Contro… |
CVE-2025-68594 | Medium | 5.3 | 2025-12-24 | Missing Authorization vulnerability in Opinion Stage Poll, Survey & Quiz Maker Plugin by Opinion Stage social-polls-by-opinionstage allows Exploiting Incorrect… |
CVE-2025-68593 | Medium | 5.4 | 2025-12-24 | Missing Authorization vulnerability in Liton Arefin WP Adminify adminify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2025-68592 | Medium | 4.3 | 2025-12-24 | Missing Authorization vulnerability in Liton Arefin WP Adminify adminify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2025-68591 | Medium | 5.4 | 2025-12-24 | Missing Authorization vulnerability in Mitchell Bennis Simple File List simple-file-list allows Exploiting Incorrectly Configured Access Control Security Level… |
CVE-2025-68589 | Medium | 5.3 | 2025-12-24 | Missing Authorization vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Exploiting Incorrectly Configured Access Control Secu… |
CVE-2025-68588 | Medium | 4.3 | 2025-12-24 | Missing Authorization vulnerability in totalsoft TS Poll poll-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TS… |
CVE-2025-68587 | Medium | 4.3 | 2025-12-24 | Missing Authorization vulnerability in Bob Watu Quiz watu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Watu Quiz… |
CVE-2025-68586 | Medium | 5.3 | 2025-12-24 | Missing Authorization vulnerability in Gora Tech Cooked cooked allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cooke… |
CVE-2025-68585 | Low | 2.7 | 2025-12-24 | Missing Authorization vulnerability in Ben Balter WP Document Revisions wp-document-revisions allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2025-68582 | Medium | 5.3 | 2025-12-24 | Missing Authorization vulnerability in Funnelforms Funnelforms Free funnelforms-free allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2025-68581 | Medium | 5.4 | 2025-12-24 | Missing Authorization vulnerability in YITHEMES YITH Slider for page builders yith-slider-for-page-builders allows Exploiting Incorrectly Configured Access Con… |
CVE-2025-68579 | Medium | 5.3 | 2025-12-24 | Missing Authorization vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Exploiting Incorrectly Configured Access Control Security Level… |
CVE-2025-68578 | Medium | 5.3 | 2025-12-24 | Missing Authorization vulnerability in Addonify Addonify addonify-quick-view allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2025-68577 | Medium | 4.3 | 2025-12-24 | Missing Authorization vulnerability in Virusdie Virusdie virusdie allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Vi… |
CVE-2025-68575 | Medium | 5.3 | 2025-12-24 | Missing Authorization vulnerability in Wappointment team Wappointment wappointment allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-68572 | Medium | 5.3 | 2025-12-24 | Missing Authorization vulnerability in Spider Themes BBP Core bbp-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2025-68571 | Medium | 5.3 | 2025-12-24 | Missing Authorization vulnerability in SALESmanago SALESmanago & Leadoo salesmanago allows Exploiting Incorrectly Configured Access Control Security Levels.Thi… |
CVE-2025-68569 | Medium | 6.5 | 2025-12-24 | Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows Exploiting Incorrectly Configured Access Control… |
CVE-2025-68568 | Medium | 5.3 | 2025-12-24 | Missing Authorization vulnerability in Claspo Popup Builders Claspo – Popups, Spin the Wheel & Email Capture claspo allows Exploiting Incorrectly Configured Ac… |
CVE-2025-68565 | Medium | 5.3 | 2025-12-24 | Missing Authorization vulnerability in JayBee Twitch Player ttv-easy-embed-player allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-68535 | Medium | 4.3 | 2025-12-24 | Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Securi… |
CVE-2025-68523 | Medium | 4.3 | 2025-12-24 | Missing Authorization vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2025-68522 | Medium | 4.3 | 2025-12-24 | Missing Authorization vulnerability in wpstream WpStream wpstream allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wp… |
CVE-2025-68521 | Medium | 5.3 | 2025-12-24 | Missing Authorization vulnerability in wpstream WpStream wpstream allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wp… |
CVE-2025-68517 | Medium | 5.4 | 2025-12-24 | Missing Authorization vulnerability in Essekia Tablesome tablesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects T… |
CVE-2025-68511 | Medium | 6.5 | 2025-12-24 | Missing Authorization vulnerability in Jegstudio Gutenverse Form gutenverse-form allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2025-68508 | Medium | 5.3 | 2025-12-24 | Missing Authorization vulnerability in Brave Brave brave-popup-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2025-68505 | Medium | 5.3 | 2025-12-24 | Missing Authorization vulnerability in icc0rz H5P h5p allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects H5P: from n/a… |
CVE-2023-40679 | Medium | 6.5 | 2025-12-24 | Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2023-28619 | Medium | 4.3 | 2025-12-24 | Missing Authorization vulnerability in bnayawpguy Resoto allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Resoto: fro… |
CVE-2025-68557 | Medium | 4.3 | 2025-12-23 | Missing Authorization vulnerability in Vikas Ratudi Chakra test chakra-test allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2025-68556 | Medium | 5.3 | 2025-12-23 | Missing Authorization vulnerability in VillaTheme HAPPY happy-helpdesk-support-ticket-system allows Exploiting Incorrectly Configured Access Control Security L… |
CVE-2024-24844 | High | 7.5 | 2025-12-23 | Missing Authorization vulnerability in IdeaBox Creations PowerPack Pro for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2025-14155 | Medium | 5.3 | 2025-12-23 | The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to unauthorized access of data due to a missing ca… |
CVE-2025-12934 | High | 8.1 | 2025-12-23 | The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability chec… |
CVE-2025-66736 | High | 7.1 | 2025-12-22 | youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The importUsers function in SysUserController.java does not perform a permission check on the cu… |
CVE-2025-66735 | High | 7.5 | 2025-12-22 | youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The getRoleForm function in SysRoleController.java does not perform permission checks, which may… |
CVE-2025-14080 | Medium | 5.3 | 2025-12-21 | The Frontend Post Submission Manager Lite plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.2.5. This is due… |
CVE-2025-14043 | Medium | 5.3 | 2025-12-21 | The Tainacan plugin for WordPress is vulnerable to unauthorized metadata section creation due to missing authorization checks in all versions up to, and includ… |
CVE-2025-12980 | High | 7.5 | 2025-12-21 | The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to unauthorized access of data due to a missing ca… |
CVE-2023-25446 | High | 7.7 | 2025-12-21 | Missing Authorization vulnerability in HappyFiles HappyFiles Pro happyfiles-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2023-25445 | Medium | 5.4 | 2025-12-21 | Missing Authorization vulnerability in HappyFiles HappyFiles Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hap… |
CVE-2023-25068 | Medium | 4.3 | 2025-12-21 | Missing Authorization vulnerability in Mapro Collins Magazine Edge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects M… |