CWE-862 · Missing Authorization (page 43)
Page 43 of 92 — CVEs classified under CWE-862, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-3124 | Medium | 4.3 | 2025-04-17 | A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a user to see the names of private repositories that they wouldn'… |
CVE-2025-39583 | High | 7.1 | 2025-04-17 | Missing Authorization vulnerability in Bertha AI – Andrew Palmer BERTHA AI bertha-ai-free allows Exploiting Incorrectly Configured Access Control Security Leve… |
CVE-2025-39580 | Medium | 5.8 | 2025-04-17 | Missing Authorization vulnerability in jidaikobo Dashi dashi allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Dashi: from n/a… |
CVE-2025-39559 | Medium | 6.5 | 2025-04-17 | Missing Authorization vulnerability in Eivin Landa Bring Fraktguiden for WooCommerce bring-fraktguiden-for-woocommerce allows Exploiting Incorrectly Configured… |
CVE-2025-39554 | Medium | 6.5 | 2025-04-17 | Missing Authorization vulnerability in Elliot Sowersby / RelyWP AI Text to Speech ai-text-to-speech allows Exploiting Incorrectly Configured Access Control Sec… |
CVE-2025-39533 | High | 8.8 | 2025-04-17 | Missing Authorization vulnerability in Starfish Reviews Starfish Review Generation & Marketing starfish-reviews allows Privilege Escalation.This issue affects… |
CVE-2025-39532 | High | 7.5 | 2025-04-17 | Missing Authorization vulnerability in spicethemes Spice Blocks spice-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2025-39457 | Medium | 5.3 | 2025-04-17 | Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Confi… |
CVE-2025-39456 | Medium | 5.4 | 2025-04-17 | Missing Authorization vulnerability in iTRON WP Logger wp-data-logger allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2025-32620 | High | 7.1 | 2025-04-17 | Missing Authorization vulnerability in fromdoppler Doppler Forms doppler-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2025-32593 | High | 8.2 | 2025-04-17 | Missing Authorization vulnerability in Bytes Technolab Add Product Frontend for WooCommerce add-product-frontend-for-woocommerce allows Exploiting Incorrectly… |
CVE-2025-32544 | High | 7.5 | 2025-04-17 | Missing Authorization vulnerability in The Right Software WooCommerce Loyal Customers woocommerce-loyal-customer allows Accessing Functionality Not Properly Co… |
CVE-2025-27310 | Medium | 6.5 | 2025-04-17 | Missing Authorization vulnerability in Radius of Thought Page and Post Lister page-and-post-lister allows Exploiting Incorrectly Configured Access Control Secu… |
CVE-2025-26968 | High | 7.5 | 2025-04-17 | Missing Authorization vulnerability in webbernaut Cloak Front End Email allows Exploiting Incorrectly Configured Access Control Security Levels. This issue aff… |
CVE-2025-24737 | Medium | 6.5 | 2025-04-17 | Missing Authorization vulnerability in Mat Bao Corporation WP Helper Premium wp-helper-lite allows Accessing Functionality Not Properly Constrained by ACLs.Thi… |
CVE-2025-24583 | Medium | 6.5 | 2025-04-17 | Missing Authorization vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Exploiting Incorrectly Configured Access Control Securit… |
CVE-2025-24581 | Medium | 6.5 | 2025-04-17 | Missing Authorization vulnerability in Themefic Instantio instantio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2025-24577 | Medium | 6.5 | 2025-04-17 | Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2025-23958 | Medium | 6.5 | 2025-04-17 | Missing Authorization vulnerability in FADI MED Editor Wysiwyg Background Color editor-wysiwyg-background-color allows Exploiting Incorrectly Configured Access… |
CVE-2025-23906 | Medium | 6.5 | 2025-04-17 | Missing Authorization vulnerability in wpseek WordPress Dashboard Tweeter allows Exploiting Incorrectly Configured Access Control Security Levels. This issue a… |
CVE-2025-23773 | Medium | 6.5 | 2025-04-17 | Missing Authorization vulnerability in mingocommerce Delete All Posts allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affe… |
CVE-2025-31338 | | 2025-04-17 | A missing authorization vulnerability in the retrieve teacher Information function of Wisdom Master Pro versions 5.0 through 5.2 allows remote attackers to obt… | |
CVE-2025-39602 | Medium | 4.3 | 2025-04-16 | Missing Authorization vulnerability in WC Product Table WooCommerce Product Table Lite wc-product-table-lite allows Exploiting Incorrectly Configured Access Co… |
CVE-2025-39591 | Medium | 5.4 | 2025-04-16 | Missing Authorization vulnerability in WP Shuffle WP Subscription Forms wp-subscription-forms allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2025-39571 | Medium | 4.3 | 2025-04-16 | Missing Authorization vulnerability in WPXPO WowStore product-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2025-39560 | Medium | 5.4 | 2025-04-16 | Missing Authorization vulnerability in Shahjada Live Forms liveforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2025-39552 | Medium | 5.4 | 2025-04-16 | Missing Authorization vulnerability in Dylan James Zephyr Project Manager zephyr-project-manager allows Exploiting Incorrectly Configured Access Control Securi… |
CVE-2025-39545 | Medium | 5.4 | 2025-04-16 | Missing Authorization vulnerability in miniOrange WordPress REST API Authentication wp-rest-api-authentication allows Exploiting Incorrectly Configured Access… |
CVE-2025-39531 | Medium | 5.3 | 2025-04-16 | Missing Authorization vulnerability in slazzercom Slazzer Background Changer slazzer-background-changer allows Accessing Functionality Not Properly Constrained… |
CVE-2025-39522 | Medium | 5.4 | 2025-04-16 | Missing Authorization vulnerability in Service2Client LLC Dynamic Post dynamic-post allows Exploiting Incorrectly Configured Access Control Security Levels.Thi… |
CVE-2025-39513 | Medium | 5.3 | 2025-04-16 | Missing Authorization vulnerability in ActiveDEMAND Online Agency Marketing Automation ActiveDEMAND activedemand allows Accessing Functionality Not Properly Co… |
CVE-2025-3687 | Medium | 4.3 | 2025-04-16 | A vulnerability, which was classified as problematic, has been found in misstt123 oasys 1.0. Affected by this issue is some unknown functionality of the compon… |
CVE-2025-30960 | High | 8.3 | 2025-04-16 | Missing Authorization vulnerability in fs-code FS Poster fs-poster.This issue affects FS Poster: from n/a through <= 6.5.8. |
CVE-2025-27008 | High | 7.5 | 2025-04-15 | Missing Authorization vulnerability in NotFound Unlimited Timeline unlimited-timeline allows Accessing Functionality Not Properly Constrained by ACLs.This issu… |
CVE-2025-26953 | High | 7.5 | 2025-04-15 | Missing Authorization vulnerability in Crocoblock JetMenu jet-menu allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetMenu… |
CVE-2025-30716 | High | 7.5 | 2025-04-15 | Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). Supported versions that are aff… |
CVE-2025-32929 | High | 7.5 | 2025-04-15 | Missing Authorization vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Generator for WooCommerce embedding-barcodes-into-product-pages-and-orders all… |
CVE-2025-26959 | High | 8.8 | 2025-04-15 | Missing Authorization vulnerability in Quý Lê 91 Administrator Z administrator-z allows Privilege Escalation.This issue affects Administrator Z: from n/a throu… |
CVE-2025-26958 | High | 7.5 | 2025-04-15 | Missing Authorization vulnerability in Crocoblock JetBlog jet-blog allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetBlog… |
CVE-2025-26955 | Medium | 4.3 | 2025-04-15 | Missing Authorization vulnerability in vowelweb Industrial Lite industrial-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2025-26944 | High | 7.5 | 2025-04-15 | Missing Authorization vulnerability in Crocoblock JetPopup jet-popup allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetPopu… |
CVE-2025-26942 | High | 7.5 | 2025-04-15 | Missing Authorization vulnerability in Crocoblock JetTricks jet-tricks allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetTr… |
CVE-2025-26741 | High | 8.8 | 2025-04-15 | Missing Authorization vulnerability in AWEOS GmbH Email Notifications for Updates wp-update-mail-notification allows Privilege Escalation.This issue affects Em… |
CVE-2025-3561 | Medium | 4.3 | 2025-04-14 | A vulnerability was found in ghostxbh uzy-ssm-mall 1.0.0. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cro… |
CVE-2025-3557 | Medium | 4.3 | 2025-04-14 | A vulnerability, which was classified as problematic, has been found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected by this issue is some unknown fun… |
CVE-2025-32542 | High | 8.8 | 2025-04-11 | Missing Authorization vulnerability in EazyPlugins Eazy Plugin Manager plugins-on-steroids allows Exploiting Incorrectly Configured Access Control Security Lev… |
CVE-2025-31041 | High | 7.5 | 2025-04-11 | Missing Authorization vulnerability in AnyTrack AnyTrack Affiliate Link Manager anytrack-affiliate-link-manager allows Exploiting Incorrectly Configured Access… |
CVE-2025-32260 | Medium | 5.3 | 2025-04-10 | Missing Authorization vulnerability in Detheme DethemeKit For Elementor dethemekit-for-elementor.This issue affects DethemeKit For Elementor: from n/a through… |
CVE-2025-32259 | Medium | 5.3 | 2025-04-10 | Missing Authorization vulnerability in Alimir WP ULike wp-ulike.This issue affects WP ULike: from n/a through <= 4.7.9.1. |
CVE-2025-32244 | Medium | 6.5 | 2025-04-10 | Missing Authorization vulnerability in QuantumCloud SEO Help seo-help allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2025-32243 | Medium | 6.5 | 2025-04-10 | Missing Authorization vulnerability in Toast Plugins Internal Link Optimiser internal-link-finder allows Exploiting Incorrectly Configured Access Control Secur… |
CVE-2025-32242 | Medium | 6.5 | 2025-04-10 | Missing Authorization vulnerability in Hive Support Hive Support hive-support allows Accessing Functionality Not Properly Constrained by ACLs.This issue affect… |
CVE-2025-32240 | Medium | 6.5 | 2025-04-10 | Missing Authorization vulnerability in wpvsingh Site Notify site-notify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2025-32236 | Medium | 4.3 | 2025-04-10 | Missing Authorization vulnerability in Vagonic Woocommerce Products Reorder Drag Drop Multiple Sort – Sortable, Rearrange Products Vagonic vagonic-sortable.Thi… |
CVE-2025-32221 | Medium | 5.4 | 2025-04-10 | Missing Authorization vulnerability in Spider Themes EazyDocs eazydocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2025-32216 | Medium | 6.4 | 2025-04-10 | Missing Authorization vulnerability in Spider Themes Spider Elements spider-elements allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2025-32213 | Medium | 6.5 | 2025-04-10 | Missing Authorization vulnerability in flothemesplugins Flo Forms flo-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2025-32212 | Medium | 6.5 | 2025-04-10 | Missing Authorization vulnerability in Specia Theme Specia Companion specia-companion allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2025-32210 | Medium | 6.5 | 2025-04-10 | Missing Authorization vulnerability in CreativeMindsSolutions CM Registration and Invitation Codes cm-invitation-codes allows Exploiting Incorrectly Configured… |
CVE-2025-32208 | Medium | 6.5 | 2025-04-10 | Missing Authorization vulnerability in Hive Support Hive Support hive-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2025-3417 | High | 8.8 | 2025-04-10 | The Embedder plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on… |
CVE-2025-2719 | Medium | 6.5 | 2025-04-10 | The Swatchly – WooCommerce Variation Swatches for Products (product attributes: Image swatch, Color swatches, Label swatches) plugin for WordPress is vulnerabl… |
CVE-2025-26901 | Medium | 4.3 | 2025-04-09 | Missing Authorization vulnerability in Brizy Brizy Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brizy Pro: fr… |
CVE-2025-26888 | Medium | 5.3 | 2025-04-09 | Missing Authorization vulnerability in Amir Helzer WooCommerce Multilingual & Multicurrency woocommerce-multilingual allows Exploiting Incorrectly Configured A… |
CVE-2025-32684 | Medium | 5.0 | 2025-04-09 | Missing Authorization vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2025-32624 | High | 7.1 | 2025-04-09 | Missing Authorization vulnerability in czater Czater.pl – live chat i telefon czater allows Cross Site Request Forgery.This issue affects Czater.pl – live chat… |
CVE-2025-31377 | High | 7.5 | 2025-04-09 | Missing Authorization vulnerability in Asaquzzaman mishu Woo Product Feed For Marketing Channels woocommerce-to-google-merchant-center allows Exploiting Incorr… |
CVE-2025-31042 | Medium | 5.3 | 2025-04-09 | Missing Authorization vulnerability in rtakao Sandwich Adsense firsth3tagadsense allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2025-31012 | Medium | 5.3 | 2025-04-09 | Missing Authorization vulnerability in Phil Age Gate age-gate allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Age Gate: from… |
CVE-2025-31004 | Medium | 4.3 | 2025-04-09 | Missing Authorization vulnerability in Croover.inc Rich Table of Contents rich-table-of-content allows Exploiting Incorrectly Configured Access Control Securit… |
CVE-2025-32279 | Medium | 4.3 | 2025-04-08 | Missing Authorization vulnerability in Shahjada Live Forms liveforms.This issue affects Live Forms: from n/a through <= 4.8.5. |
CVE-2025-2876 | Medium | 5.3 | 2025-04-08 | The MelaPress Login Security and MelaPress Login Security Premium plugins for WordPress is vulnerable to unauthorized loss of data due to a missing capability… |
CVE-2025-2568 | Medium | 5.3 | 2025-04-08 | The Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce plugin for WordPress is vulnerable to unauthorized access and modification of data due to missin… |
CVE-2025-3437 | Medium | 4.3 | 2025-04-08 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability ch… |
CVE-2025-2807 | High | 8.8 | 2025-04-08 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary plugin installations due to a missing capability check… |
CVE-2025-30017 | Medium | 4.4 | 2025-04-08 | Due to a missing authorization check, an authenticated attacker could upload a file as a template for solution documentation in SAP Solution Manager 7.1. After… |
CVE-2025-27437 | Medium | 4.3 | 2025-04-08 | A Missing Authorization Check vulnerability exists in the Virus Scanner Interface of SAP NetWeaver Application Server ABAP. Because of this, an attacker authen… |
CVE-2025-27435 | Medium | 4.2 | 2025-04-08 | Under specific conditions and prerequisites, an unauthenticated attacker could access customer coupon codes exposed in the URL parameters of the Coupon Campaig… |
CVE-2025-27428 | High | 7.7 | 2025-04-08 | Due to directory traversal vulnerability, an authorized attacker could gain access to some critical information by using RFC enabled function module. Upon succ… |
CVE-2025-26657 | Medium | 5.3 | 2025-04-08 | SAP KMC WPC allows an unauthenticated attacker to remotely retrieve usernames by a simple parameter query which could expose sensitive information causing low… |
CVE-2025-31171 | Medium | 6.8 | 2025-04-07 | File read permission bypass vulnerability in the kernel file system module Impact: Successful exploitation of this vulnerability may affect service confidentia… |
CVE-2025-2789 | Medium | 5.3 | 2025-04-05 | The MultiVendorX – Empower Your WooCommerce Store with a Dynamic Multivendor Marketplace – Build the Next Amazon, eBay, Etsy plugin for WordPress is vulnerable… |
CVE-2025-1233 | Medium | 4.3 | 2025-04-05 | The Lafka Plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'lafka_options_upload' AJAX function in all versio… |
CVE-2024-13776 | High | 8.1 | 2025-04-05 | The ZoomSounds - WordPress Wave Audio Player with Playlist plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of… |
CVE-2025-2933 | High | 8.8 | 2025-04-05 | The Email Notifications for Updates plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a miss… |
CVE-2025-3257 | Medium | 4.3 | 2025-04-04 | A vulnerability classified as problematic has been found in xujiangfei admintwo 1.0. This affects an unknown part of the file /user/updateSet. The manipulation… |
CVE-2025-32277 | Medium | 4.3 | 2025-04-04 | Missing Authorization vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2025-32258 | Medium | 5.3 | 2025-04-04 | Missing Authorization vulnerability in InfoGiants Simple Website Logo simple-website-logo allows Exploiting Incorrectly Configured Access Control Security Leve… |
CVE-2025-32256 | Medium | 5.3 | 2025-04-04 | Missing Authorization vulnerability in devsoftbaltic SurveyJS surveyjs allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Surve… |
CVE-2025-32254 | Medium | 5.3 | 2025-04-04 | Missing Authorization vulnerability in Iqonic Design WPBookit wpbookit allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPBoo… |
CVE-2025-32253 | Medium | 5.3 | 2025-04-04 | Missing Authorization vulnerability in ComMotion Course Booking System course-booking-system allows Accessing Functionality Not Properly Constrained by ACLs.Th… |
CVE-2025-32252 | Medium | 5.3 | 2025-04-04 | Missing Authorization vulnerability in Black and White WP Genealogy – Your Family History Website wpgenealogy allows Exploiting Incorrectly Configured Access C… |
CVE-2025-32246 | Medium | 5.4 | 2025-04-04 | Missing Authorization vulnerability in Tim Nguyen 1-Click Backup & Restore Database 1-click-backup-restore-database-by-sunbytes allows Exploiting Incorrectly C… |
CVE-2025-32239 | Medium | 4.3 | 2025-04-04 | Missing Authorization vulnerability in Joao Romao Social Share Buttons & Analytics Plugin – GetSocial.io wp-share-buttons-analytics-by-getsocial allows Exploit… |
CVE-2025-32237 | Medium | 4.3 | 2025-04-04 | Missing Authorization vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Exploiting Incorrectly Configured Access Cont… |
CVE-2025-32235 | Medium | 4.3 | 2025-04-04 | Missing Authorization vulnerability in sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar mp3-music-player-by-sonaar allows Exploiting Incorrectly Co… |
CVE-2025-32234 | Medium | 4.3 | 2025-04-04 | Missing Authorization vulnerability in aleswebs AdMail – Multilingual Back in-Stock Notifier for WooCommerce admail allows Exploiting Incorrectly Configured Ac… |
CVE-2025-32233 | Medium | 4.3 | 2025-04-04 | Missing Authorization vulnerability in WP Chill Revive.so revive-so allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2025-32232 | Medium | 4.3 | 2025-04-04 | Missing Authorization vulnerability in ERA404 StaffList stafflist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects St… |
CVE-2025-32231 | Medium | 4.3 | 2025-04-04 | Missing Authorization vulnerability in Bookingor Bookingor bookingor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |