CWE-862 · Missing Authorization (page 44)
Page 44 of 92 — CVEs classified under CWE-862, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-32229 | Medium | 4.3 | 2025-04-04 | Missing Authorization vulnerability in Bowo Variable Inspector variable-inspector allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-32226 | Medium | 4.3 | 2025-04-04 | Missing Authorization vulnerability in Anzar Ahmed Display product variations dropdown on shop page display-product-variations-dropdown-on-shop-page allows Exp… |
CVE-2025-32225 | Medium | 5.3 | 2025-04-04 | Missing Authorization vulnerability in WP Event Manager WP Event Manager wp-event-manager allows Exploiting Incorrectly Configured Access Control Security Leve… |
CVE-2025-32224 | Medium | 5.4 | 2025-04-04 | Missing Authorization vulnerability in Shivam Mani Tripathi Privyr CRM Integration privy-crm-integration allows Exploiting Incorrectly Configured Access Contro… |
CVE-2025-32220 | Medium | 5.4 | 2025-04-04 | Missing Authorization vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Exploiting Incorrectly Configured Access Control Securit… |
CVE-2025-32219 | Medium | 5.4 | 2025-04-04 | Missing Authorization vulnerability in Syntactics, Inc. eaSYNC easync-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2025-32218 | Medium | 5.4 | 2025-04-04 | Missing Authorization vulnerability in RealMag777 TableOn posts-table-filterable allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2025-32217 | Medium | 5.4 | 2025-04-04 | Missing Authorization vulnerability in WP Messiah Ai Image Alt Text Generator for WP ai-image-alt-text-generator-for-wp allows Exploiting Incorrectly Configure… |
CVE-2025-32201 | Medium | 4.3 | 2025-04-04 | Missing Authorization vulnerability in Xpro Xpro Theme Builder xpro-theme-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-32178 | Medium | 5.4 | 2025-04-04 | Missing Authorization vulnerability in 6Storage 6Storage Rentals 6storage-rentals allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-32147 | High | 8.8 | 2025-04-04 | Missing Authorization vulnerability in coothemes Easy WP Optimizer easy-wp-optimizer allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2025-31381 | Medium | 6.5 | 2025-04-04 | Missing Authorization vulnerability in shiptrack Booking Calendar and Notification booking-calendar-and-notification allows Exploiting Incorrectly Configured A… |
CVE-2025-22285 | Medium | 6.5 | 2025-04-04 | Missing Authorization vulnerability in enituretechnology Pallet Packaging for WooCommerce pallet-packaging-for-woocommerce allows Exploiting Incorrectly Config… |
CVE-2025-2075 | High | 8.8 | 2025-04-04 | The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin for WordPress is vulnerable to Privilege Escalation in all versions up… |
CVE-2025-31909 | High | 7.5 | 2025-04-03 | Missing Authorization vulnerability in Apptivo Apptivo Business Site CRM apptivo-business-site allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2025-31896 | Medium | 6.5 | 2025-04-03 | Missing Authorization vulnerability in istmoplugins GetBookingsWP get-bookings-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-31876 | Medium | 5.8 | 2025-04-03 | Missing Authorization vulnerability in gunnarpayday Payday payday allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pa… |
CVE-2025-31858 | Medium | 6.5 | 2025-04-03 | Missing Authorization vulnerability in matthewrubin Local Magic local-magic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2025-31841 | Medium | 6.3 | 2025-04-03 | Missing Authorization vulnerability in Frank P. Walentynowicz FPW Category Thumbnails fpw-category-thumbnails allows Exploiting Incorrectly Configured Access C… |
CVE-2025-31795 | Medium | 6.5 | 2025-04-03 | Missing Authorization vulnerability in Plugin Devs Shopify to WooCommerce Migration migrate-shopify-to-woocommerce allows Exploiting Incorrectly Configured Acc… |
CVE-2025-31794 | Medium | 5.4 | 2025-04-03 | Missing Authorization vulnerability in Web Ready Now WR Price List Manager For Woocommerce wr-price-list-for-woocommerce allows Exploiting Incorrectly Configur… |
CVE-2025-31789 | Medium | 6.5 | 2025-04-03 | Missing Authorization vulnerability in Matat Technologies TextMe SMS textme-sms-integration allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2025-31768 | Medium | 6.5 | 2025-04-03 | Missing Authorization vulnerability in OTWthemes Widget Manager Light widget-manager-light allows Accessing Functionality Not Properly Constrained by ACLs.This… |
CVE-2025-31758 | Medium | 6.5 | 2025-04-03 | Missing Authorization vulnerability in BinaryCarpenter Free Woocommerce Product Table View free-product-table-for-woocommerce allows Exploiting Incorrectly Con… |
CVE-2025-31746 | Medium | 6.4 | 2025-04-03 | Missing Authorization vulnerability in Think201 Clients clients allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clie… |
CVE-2025-31739 | Medium | 6.4 | 2025-04-03 | Missing Authorization vulnerability in Manuel Schmalstieg Minimalistic Event Manager minimalistic-event-manager allows Exploiting Incorrectly Configured Access… |
CVE-2025-31736 | Medium | 6.5 | 2025-04-03 | Missing Authorization vulnerability in richtexteditor Rich Text Editor richtexteditor allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2025-31729 | Medium | 6.5 | 2025-04-03 | Missing Authorization vulnerability in jeffikus WooTumblog woo-tumblog allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2025-31581 | Medium | 6.5 | 2025-04-03 | Missing Authorization vulnerability in Sandeep Kumar WP Video Playlist wp-video-playlist allows Exploiting Incorrectly Configured Access Control Security Level… |
CVE-2025-31541 | Medium | 6.5 | 2025-04-03 | Missing Authorization vulnerability in TuriTop TuriTop Booking System turitop-booking-system allows Exploiting Incorrectly Configured Access Control Security L… |
CVE-2025-30916 | Medium | 6.5 | 2025-04-03 | Missing Authorization vulnerability in enituretechnology Residential Address Detection residential-address-detection allows Exploiting Incorrectly Configured A… |
CVE-2025-30915 | Medium | 6.5 | 2025-04-03 | Missing Authorization vulnerability in enituretechnology Small Package Quotes – Worldwide Express Edition small-package-quotes-wwe-edition allows Exploiting In… |
CVE-2025-3150 | Medium | 4.3 | 2025-04-03 | A vulnerability was found in itning Student Homework Management System up to 1.2.7. It has been declared as problematic. Affected by this vulnerability is an u… |
CVE-2025-31721 | Medium | 4.3 | 2025-04-02 | A missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers with Computer/Create permission but without Computer/Configur… |
CVE-2025-31720 | Medium | 4.3 | 2025-04-02 | A missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers with Computer/Create permission but without Computer/Extended… |
CVE-2025-3063 | High | 8.8 | 2025-04-02 | The Shopper Approved Reviews plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing cap… |
CVE-2024-13637 | Medium | 6.5 | 2025-04-02 | The Demo Awesome plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the install_plugin function in al… |
CVE-2025-2779 | Medium | 6.5 | 2025-04-02 | The Insert Headers and Footers Code – HT Script plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on th… |
CVE-2025-31628 | Medium | 5.3 | 2025-04-01 | Missing Authorization vulnerability in SlicedInvoices Sliced Invoices sliced-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2025-31580 | High | 7.5 | 2025-04-01 | Missing Authorization vulnerability in Anzar Ahmed Ni WooCommerce Product Enquiry ni-woocommerce-product-enquiry allows Accessing Functionality Not Properly Co… |
CVE-2025-31525 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in WP Messiah WP Mobile Bottom Menu mobile-bottom-menu-for-wp allows Exploiting Incorrectly Configured Access Control Secur… |
CVE-2025-30853 | Medium | 5.4 | 2025-04-01 | Missing Authorization vulnerability in ShortPixel ShortPixel Adaptive Images shortpixel-adaptive-images allows Exploiting Incorrectly Configured Access Control… |
CVE-2025-30825 | High | 8.8 | 2025-04-01 | Missing Authorization vulnerability in WPClever WPC Smart Linked Products - Upsells & Cross-sells for WooCommerce wpc-smart-linked-products allows Privilege Es… |
CVE-2025-31887 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in zookatron MyBookProgress by Stormhill Media mybookprogress allows Exploiting Incorrectly Configured Access Control Secur… |
CVE-2025-31886 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in Repuso Social proof testimonials and reviews by Repuso social-testimonials-and-reviews-widget allows Exploiting Incorrec… |
CVE-2025-31882 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2025-31881 | Medium | 5.4 | 2025-04-01 | Missing Authorization vulnerability in Stylemix Pearl pearl-header-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2025-31879 | Medium | 5.4 | 2025-04-01 | Missing Authorization vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Generator for WooCommerce embedding-barcodes-into-product-pages-and-orders all… |
CVE-2025-31878 | Medium | 5.4 | 2025-04-01 | Missing Authorization vulnerability in Dmitry V. (CEO of "UKR Solution") UPC/EAN/GTIN Code Generator upc-ean-barcode-generator allows Exploiting Incorrectly Co… |
CVE-2025-31877 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in Magnigenie RestroPress restropress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2025-31872 | Medium | 5.3 | 2025-04-01 | Missing Authorization vulnerability in Galaxy Weblinks WP Clone any post type wp-clone-any-post-type allows Exploiting Incorrectly Configured Access Control Se… |
CVE-2025-31870 | Medium | 5.4 | 2025-04-01 | Missing Authorization vulnerability in EXEIdeas International WP AutoKeyword wp-autokeyword allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2025-31868 | Medium | 5.3 | 2025-04-01 | Missing Authorization vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2025-31866 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in Ship Depot ShipDepot for WooCommerce ship-depot allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2025-31865 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in CartBoss CartBoss cartboss allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ca… |
CVE-2025-31863 | Medium | 5.3 | 2025-04-01 | Missing Authorization vulnerability in inspry Agency Toolkit agency-toolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2025-31862 | Medium | 5.3 | 2025-04-01 | Missing Authorization vulnerability in PickPlugins Job Board Manager job-board-manager allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2025-31856 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in brainvireinfo Export All Post Meta export-all-post-meta allows Accessing Functionality Not Properly Constrained by ACLs… |
CVE-2025-31854 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in Sharaz Shahid Simple Sticky Add To Cart For WooCommerce sticky-add-to-cart-woo allows Exploiting Incorrectly Configured… |
CVE-2025-31848 | Medium | 5.3 | 2025-04-01 | Missing Authorization vulnerability in WPFactory Adverts adverts-click-tracker allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2025-31846 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in Jeroen Schmit Theater for WordPress theatre allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-31843 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in Wilson OpenAI Tools for WordPress & WooCommerce openai-tools-for-wp-wc allows Exploiting Incorrectly Configured Access C… |
CVE-2025-31836 | Medium | 5.3 | 2025-04-01 | Missing Authorization vulnerability in matthewrubin Review Manager review-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-31834 | Medium | 5.3 | 2025-04-01 | Missing Authorization vulnerability in themeglow JobBoard Job listing job-board-light allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2025-31831 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in Team AtomChat AtomChat atomchat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2025-31830 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in Uriahs Victor Printus printus-cloud-printing-for-woocommerce allows Exploiting Incorrectly Configured Access Control Sec… |
CVE-2025-31826 | Medium | 5.4 | 2025-04-01 | Missing Authorization vulnerability in Anzar Ahmed Ni WooCommerce Cost Of Goods ni-woocommerce-cost-of-goods allows Exploiting Incorrectly Configured Access Co… |
CVE-2025-31822 | Medium | 5.3 | 2025-04-01 | Missing Authorization vulnerability in Ashish Ajani WP Simple HTML Sitemap wp-simple-html-sitemap allows Exploiting Incorrectly Configured Access Control Secur… |
CVE-2025-31820 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in webdevstudios Automatic Featured Images from Videos automatic-featured-images-from-videos allows Exploiting Incorrectly… |
CVE-2025-31816 | Medium | 5.4 | 2025-04-01 | Missing Authorization vulnerability in pietro Mobile App Canvas mobile-app allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2025-31810 | Medium | 5.3 | 2025-04-01 | Missing Authorization vulnerability in PickPlugins Question Answer question-answer allows Accessing Functionality Not Properly Constrained by ACLs.This issue a… |
CVE-2025-31802 | Medium | 5.4 | 2025-04-01 | Missing Authorization vulnerability in Shiptimize Shiptimize for WooCommerce shiptimize-for-woocommerce allows Exploiting Incorrectly Configured Access Control… |
CVE-2025-31799 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in publitio Publitio publitio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pu… |
CVE-2025-31798 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in publitio Publitio publitio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pu… |
CVE-2025-31791 | Medium | 5.4 | 2025-04-01 | Missing Authorization vulnerability in Oliver Boyers Pin Generator pin-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2025-31787 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in AudioTheme Cue cue allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cue: from… |
CVE-2025-31786 | Medium | 5.3 | 2025-04-01 | Missing Authorization vulnerability in Travis Simple Icons simple-icons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2025-31782 | Medium | 5.4 | 2025-04-01 | Missing Authorization vulnerability in pupunzi mb.YTPlayer wpmbytplayer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2025-31781 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in ahmadshyk Gift Cards for WooCommerce woo-giftcards allows Exploiting Incorrectly Configured Access Control Security Leve… |
CVE-2025-31780 | Medium | 6.5 | 2025-04-01 | Missing Authorization vulnerability in Andy Stratton Append Content append-content allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-31777 | Medium | 5.3 | 2025-04-01 | Missing Authorization vulnerability in BeastThemes Clockinator Lite clockify-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-31774 | Medium | 5.3 | 2025-04-01 | Missing Authorization vulnerability in WebProtect.ai Astra Security Suite getastra allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-31773 | Medium | 5.3 | 2025-04-01 | Missing Authorization vulnerability in cedcommerce Ship Per Product ship-per-product allows Accessing Functionality Not Properly Constrained by ACLs.This issue… |
CVE-2025-31765 | Medium | 5.3 | 2025-04-01 | Missing Authorization vulnerability in themeqx GDPR Cookie Notice gdpr-cookie-notice allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2025-31757 | Medium | 5.4 | 2025-04-01 | Missing Authorization vulnerability in BinaryCarpenter Free Woocommerce Product Table View free-product-table-for-woocommerce allows Exploiting Incorrectly Con… |
CVE-2025-31755 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in josselynj pCloud Backup pcloud-backup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2025-31752 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in termel Bulk Fields Editor bulk-user-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-31732 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in gb-plugins GB Gallery Slideshow gb-gallery-slideshow allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2025-31408 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in Zoho Flow Zoho Flow zoho-flow allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2025-31415 | High | 7.6 | 2025-04-01 | Missing Authorization vulnerability in YayCommerce YayExtra yayextra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2025-30926 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in KingAddons.com King Addons for Elementor king-addons.This issue affects King Addons for Elementor: from n/a through <= 2… |
CVE-2025-30880 | High | 7.5 | 2025-04-01 | Missing Authorization vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2025-30797 | High | 7.5 | 2025-04-01 | Missing Authorization vulnerability in bigdrop.gr Greek Multi Tool – Fix peralinks, accents, auto create menus and more greek-multi-tool allows Exploiting Inco… |
CVE-2025-3037 | Medium | 4.3 | 2025-03-31 | A vulnerability has been found in yzk2356911358 StudentServlet-JSP cc0cdce25fbe43b6c58b60a77a2c85f52d2102f5/d4d7a0643f1dae908a4831206f2714b21820f991 and classi… |
CVE-2025-31194 | Critical | 9.8 | 2025-03-31 | An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A S… |
CVE-2025-31182 | Critical | 9.8 | 2025-03-31 | This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ve… |
CVE-2025-30461 | Critical | 9.8 | 2025-03-31 | An access issue was addressed with additional sandbox restrictions on the system pasteboards. This issue is fixed in macOS Sequoia 15.4. An app may be able to… |
CVE-2025-24249 | Critical | 9.8 | 2025-03-31 | A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A… |
CVE-2025-24245 | Critical | 9.8 | 2025-03-31 | This issue was addressed by adding a delay between verification code attempts. This issue is fixed in macOS Sequoia 15.4. A malicious app may be able to access… |
CVE-2025-24181 | Critical | 9.8 | 2025-03-31 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app ma… |