CWE-862 · Missing Authorization (page 48)
Page 48 of 92 — CVEs classified under CWE-862, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-12825 | Medium | 5.4 | 2025-02-01 | The Custom Related Posts plugin for WordPress is vulnerable to unauthorized access & modification of data due to a missing capability check on three AJAX actio… |
CVE-2025-0939 | Medium | 6.3 | 2025-02-01 | The MagicForm plugin for WordPress is vulnerable to access and modification of data due to a missing capability check on the plugin's AJAX actions in all versi… |
CVE-2024-13651 | Medium | 4.3 | 2025-02-01 | The RapidLoad – Optimize Web Vitals Automatically plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on… |
CVE-2024-13343 | High | 8.8 | 2025-02-01 | The WooCommerce Customers Manager plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the ajax_assign_new_roles() f… |
CVE-2024-12620 | Medium | 5.3 | 2025-02-01 | The AnimateGL Animations for WordPress – Elementor & Gutenberg Blocks Animations plugin for WordPress is vulnerable to unauthorized modification of data due to… |
CVE-2024-12184 | Medium | 5.3 | 2025-02-01 | The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the accua_forms_d… |
CVE-2024-12171 | High | 8.8 | 2025-02-01 | The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the 'eh… |
CVE-2025-22720 | Medium | 5.8 | 2025-01-31 | Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Confi… |
CVE-2025-22265 | Medium | 6.5 | 2025-01-31 | Missing Authorization vulnerability in mgplugin EMI Calculator emi-calculator allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2024-13530 | Medium | 4.3 | 2025-01-31 | The Custom Login Page Styler – Limit Login Attempts – Restrict Content With Login – Redirect After Login – Change Login URL – Sign in , Sign out plugin for Wor… |
CVE-2024-13717 | Medium | 4.3 | 2025-01-31 | The Contact Form and Calls To Action by vcita plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the… |
CVE-2024-13424 | Medium | 4.3 | 2025-01-31 | The Ni Sales Commission For WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'niwoosc_ajax' AJAX… |
CVE-2024-13415 | Medium | 4.3 | 2025-01-31 | The Food Menu – Restaurant Menu & Online Ordering for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check o… |
CVE-2024-13767 | High | 8.1 | 2025-01-31 | The Live2DWebCanvas plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ClearFiles() function in all… |
CVE-2024-13715 | Medium | 4.3 | 2025-01-30 | The zStore Manager Basic plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the zstore_clear_cache() function… |
CVE-2024-13652 | Medium | 4.3 | 2025-01-30 | The ECPay Ecommerce for WooCommerce plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'clear_ecpay_debug… |
CVE-2024-12822 | Critical | 9.8 | 2025-01-30 | The Media Manager for UserPro plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing ca… |
CVE-2024-12821 | High | 8.8 | 2025-01-30 | The Media Manager for UserPro plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing ca… |
CVE-2024-12269 | High | 7.5 | 2025-01-30 | The Safe Ai Malware Protection for WP plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_db() fu… |
CVE-2024-12129 | High | 8.8 | 2025-01-30 | The Royal Core plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check… |
CVE-2024-11583 | Medium | 4.3 | 2025-01-30 | The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable to unauthorized loss of data due to a mi… |
CVE-2024-10591 | High | 8.8 | 2025-01-30 | The MWB HubSpot for WooCommerce – CRM, Abandoned Cart, Email Marketing, Marketing Automation & Analytics plugin for WordPress is vulnerable to unauthorized mod… |
CVE-2025-21396 | High | 8.2 | 2025-01-29 | Missing authorization in Microsoft Account allows an unauthorized attacker to elevate privileges over a network. |
CVE-2024-40677 | High | 8.4 | 2025-01-28 | In shouldSkipForInitialSUW of AdvancedPowerUsageDetail.java, there is a possible way to bypass factory reset protections due to a missing permission check. Thi… |
CVE-2025-24143 | Medium | 6.5 | 2025-01-27 | The issue was addressed with improved access restrictions to the file system. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3… |
CVE-2025-24116 | Medium | 4.4 | 2025-01-27 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An ap… |
CVE-2025-24108 | Medium | 5.5 | 2025-01-27 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.3. An app may be able to access protected user data. |
CVE-2025-24096 | Medium | 5.5 | 2025-01-27 | This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.3. A malicious app may be able to access arbitrary files. |
CVE-2024-54542 | Critical | 9.1 | 2025-01-27 | An authentication issue was addressed with improved state management. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, watchOS… |
CVE-2025-24747 | Medium | 5.3 | 2025-01-27 | Missing Authorization vulnerability in favethemes Houzez houzez.This issue affects Houzez: from n/a through <= 3.4.0. |
CVE-2025-24744 | Medium | 4.3 | 2025-01-27 | Missing Authorization vulnerability in NotFound Bridge Core. This issue affects Bridge Core: from n/a through 3.3. |
CVE-2025-24743 | Medium | 4.3 | 2025-01-27 | Missing Authorization vulnerability in Rometheme RTMKit rometheme-for-elementor.This issue affects RTMKit: from n/a through <= 1.5.2. |
CVE-2025-24734 | High | 8.8 | 2025-01-27 | Missing Authorization vulnerability in CodeSolz Better Find and Replace real-time-auto-find-and-replace allows Privilege Escalation.This issue affects Better F… |
CVE-2025-24662 | Medium | 5.3 | 2025-01-27 | Missing Authorization vulnerability in LearnDash LearnDash LMS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Learn… |
CVE-2025-24653 | Medium | 4.3 | 2025-01-27 | Missing Authorization vulnerability in NotFound Admin and Site Enhancements (ASE) Pro allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2025-24606 | Medium | 6.4 | 2025-01-27 | Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access Control Sec… |
CVE-2025-24603 | Medium | 4.3 | 2025-01-27 | Missing Authorization vulnerability in Dmitry V. (CEO of "UKR Solution") Print Barcode Labels for your WooCommerce products/orders a4-barcode-generator.This is… |
CVE-2025-24600 | Medium | 5.3 | 2025-01-27 | Missing Authorization vulnerability in davidfcarr RSVPMarker rsvpmaker.This issue affects RSVPMarker : from n/a through <= 11.4.5. |
CVE-2025-24590 | Medium | 5.3 | 2025-01-27 | Missing Authorization vulnerability in picu picu picu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects picu: from n/a… |
CVE-2025-23982 | High | 7.1 | 2025-01-27 | Missing Authorization vulnerability in Gopi krishnan Fare Calculator fare-calculator allows Stored XSS.This issue affects Fare Calculator: from n/a through <=… |
CVE-2025-23849 | Medium | 5.4 | 2025-01-27 | Missing Authorization vulnerability in bpiwowar PAPERCITE papercite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2025-23656 | Medium | 6.5 | 2025-01-27 | Missing Authorization vulnerability in Saul Morales Pacheco Donate visa donate-visa allows Stored XSS.This issue affects Donate visa: from n/a through <= 1.0.0. |
CVE-2025-23529 | Medium | 6.5 | 2025-01-27 | Missing Authorization vulnerability in blokhauswp Minterpress minterpress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Mi… |
CVE-2025-24754 | Medium | 4.3 | 2025-01-27 | Missing Authorization vulnerability in favethemes Houzez houzez.This issue affects Houzez: from n/a through <= 3.4.0. |
CVE-2025-24584 | Medium | 4.3 | 2025-01-27 | Missing Authorization vulnerability in bdthemes Ultimate Store Kit Elementor Addons ultimate-store-kit allows Exploiting Incorrectly Configured Access Control… |
CVE-2024-11936 | High | 8.8 | 2025-01-26 | The Zox News theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on… |
CVE-2024-10574 | High | 7.2 | 2025-01-26 | The Quiz Maker Business, Developer, and Agency plugins for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on th… |
CVE-2024-13449 | Medium | 4.3 | 2025-01-25 | The Boom Fest plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'bf_admin_action' function in al… |
CVE-2024-13370 | Medium | 6.5 | 2025-01-25 | The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to unauthorized access du… |
CVE-2024-13368 | Medium | 4.3 | 2025-01-25 | The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to unauthorized access du… |
CVE-2024-12826 | Medium | 4.3 | 2025-01-25 | The GoHero Store Customizer for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wo… |
CVE-2024-12113 | Medium | 4.3 | 2025-01-25 | The Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to unauthorized loss of d… |
CVE-2025-24753 | Medium | 4.3 | 2025-01-24 | Missing Authorization vulnerability in StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks allows Exploiting Incorrectly Configured Access Control Secu… |
CVE-2025-24751 | Medium | 4.3 | 2025-01-24 | Missing Authorization vulnerability in GoDaddy CoBlocks coblocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CoB… |
CVE-2025-24750 | Medium | 5.4 | 2025-01-24 | Missing Authorization vulnerability in Syed Balkhi ExactMetrics google-analytics-dashboard-for-wp allows Exploiting Incorrectly Configured Access Control Secur… |
CVE-2025-24736 | Medium | 4.3 | 2025-01-24 | Missing Authorization vulnerability in metaphorcreations Post Duplicator post-duplicator allows Exploiting Incorrectly Configured Access Control Security Level… |
CVE-2025-24725 | Medium | 4.3 | 2025-01-24 | Missing Authorization vulnerability in ThimPress Thim Elementor Kit thim-elementor-kit allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2025-24705 | Medium | 5.3 | 2025-01-24 | Missing Authorization vulnerability in Arshid WooCommerce Quick View woo-quick-view allows Exploiting Incorrectly Configured Access Control Security Levels.Thi… |
CVE-2025-24693 | Medium | 4.3 | 2025-01-24 | Missing Authorization vulnerability in Yehi Advanced Notifications advanced-notifications allows Exploiting Incorrectly Configured Access Control Security Leve… |
CVE-2025-24691 | Medium | 4.3 | 2025-01-24 | Missing Authorization vulnerability in ctltwp People Lists people-lists allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2025-24682 | Medium | 4.3 | 2025-01-24 | Missing Authorization vulnerability in Michael Super Block Slider super-block-slider allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2025-24679 | Medium | 4.3 | 2025-01-24 | Missing Authorization vulnerability in webraketen Internal Links Manager seo-automated-link-building allows Exploiting Incorrectly Configured Access Control Se… |
CVE-2025-24652 | Medium | 5.4 | 2025-01-24 | Missing Authorization vulnerability in revmakx WP Duplicate local-sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2025-24649 | Medium | 4.3 | 2025-01-24 | Missing Authorization vulnerability in Bowo Admin and Site Enhancements (ASE) admin-site-enhancements allows Exploiting Incorrectly Configured Access Control S… |
CVE-2025-24633 | Medium | 5.3 | 2025-01-24 | Missing Authorization vulnerability in silverplugins217 Build Private Store For Woocommerce build-private-store-for-woocommerce allows Exploiting Incorrectly C… |
CVE-2025-24625 | Medium | 4.3 | 2025-01-24 | Missing Authorization vulnerability in Marco Almeida | Webdados Taxonomy/Term and Role based Discounts for WooCommerce taxonomy-discounts-woocommerce allows Ex… |
CVE-2025-24618 | Medium | 4.3 | 2025-01-24 | Missing Authorization vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows Exploiting Incorrectly Co… |
CVE-2025-24613 | Medium | 4.3 | 2025-01-24 | Missing Authorization vulnerability in FolioVision FV Thoughtful Comments thoughtful-comments allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2025-24604 | Medium | 5.4 | 2025-01-24 | Missing Authorization vulnerability in Vikas Ratudi VPSUForm v-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2025-24596 | Medium | 5.3 | 2025-01-24 | Missing Authorization vulnerability in WC Product Table WooCommerce Product Table Lite wc-product-table-lite allows Exploiting Incorrectly Configured Access Co… |
CVE-2025-24594 | Medium | 6.5 | 2025-01-24 | Missing Authorization vulnerability in aribhour Linet ERP-Woocommerce Integration linet-erp-woocommerce-integration allows Exploiting Incorrectly Configured Ac… |
CVE-2025-24591 | Medium | 4.3 | 2025-01-24 | Missing Authorization vulnerability in Ninja Team GDPR CCPA Compliance Support ninja-gdpr-compliance allows Exploiting Incorrectly Configured Access Control Se… |
CVE-2025-24589 | Medium | 4.3 | 2025-01-24 | Missing Authorization vulnerability in JS Morisset JSM Show Post Metadata jsm-show-post-meta allows Exploiting Incorrectly Configured Access Control Security L… |
CVE-2025-24588 | Medium | 6.5 | 2025-01-24 | Missing Authorization vulnerability in patreon Patreon WordPress patreon-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2025-24580 | Medium | 6.5 | 2025-01-24 | Missing Authorization vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Exploiting Incorrectly Configured Access Control Securit… |
CVE-2025-24571 | Medium | 5.4 | 2025-01-24 | Missing Authorization vulnerability in Epsiloncool WP Fast Total Search fulltext-search allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2025-22612 | Critical | 10.0 | 2025-01-24 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.374, the missing authorization… |
CVE-2025-22611 | Critical | 9.9 | 2025-01-24 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.361, the missing authorization… |
CVE-2025-22610 | Medium | 6.5 | 2025-01-24 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.361, the missing authorization… |
CVE-2025-22609 | Critical | 10.0 | 2025-01-24 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.361, the missing authorization… |
CVE-2025-22608 | Medium | 6.5 | 2025-01-24 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.361, the missing authorization… |
CVE-2025-23991 | Medium | 4.3 | 2025-01-24 | Missing Authorization vulnerability in Dotstore Product Size Charts Plugin for WooCommerce woo-advanced-product-size-chart.This issue affects Product Size Char… |
CVE-2025-22607 | Medium | 5.5 | 2025-01-24 | Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.361, the missing authorization… |
CVE-2024-13698 | Medium | 6.5 | 2025-01-24 | The Jobify - Job Board WordPress Theme for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the 'do… |
CVE-2024-13335 | Medium | 4.3 | 2025-01-24 | The Spexo Addons for Elementor – Free Elementor Addons, Widgets and Templates plugin for WordPress is vulnerable to unauthorized access due to a missing capabi… |
CVE-2025-24403 | Medium | 4.3 | 2025-01-22 | A missing permission check in Jenkins Azure Service Fabric Plugin 1.6 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of… |
CVE-2025-23684 | Medium | 4.3 | 2025-01-22 | Missing Authorization vulnerability in Eugen Bobrowski Debug Tool debug-tool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2025-23512 | High | 7.5 | 2025-01-22 | Missing Authorization vulnerability in 118group Team 118GROUP Agent team-118group-agent allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2025-23486 | Medium | 6.5 | 2025-01-22 | Missing Authorization vulnerability in tamlyn Database Sync database-sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2024-13447 | Medium | 4.3 | 2025-01-22 | The WP Hotel Booking plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the hotel_booking_load_order_user A… |
CVE-2024-13361 | Medium | 6.3 | 2025-01-22 | The AI Power: Complete AI Pack plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpaicg_save_image_media funct… |
CVE-2024-12879 | Medium | 4.3 | 2025-01-22 | The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'qc_wp_latest_… |
CVE-2025-21527 | Medium | 6.1 | 2025-01-21 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Design Tools SEC). Supported versions that are affected are Prior… |
CVE-2025-21514 | Medium | 5.3 | 2025-01-21 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior… |
CVE-2025-21498 | Medium | 5.3 | 2025-01-21 | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Easily e… |
CVE-2025-24461 | Medium | 6.5 | 2025-01-21 | In JetBrains TeamCity before 2024.12.1 decryption of connection secrets without proper permissions was possible via Test Connection endpoint |
CVE-2025-23477 | High | 8.2 | 2025-01-21 | Missing Authorization vulnerability in realtyworkstation Realty Workstation realty-workstation allows Accessing Functionality Not Properly Constrained by ACLs… |
CVE-2025-22722 | Medium | 4.3 | 2025-01-21 | Missing Authorization vulnerability in Marketing Fire Widget Options widget-options allows Exploiting Incorrectly Configured Access Control Security Levels.Thi… |
CVE-2025-22721 | Medium | 4.3 | 2025-01-21 | Missing Authorization vulnerability in Farhan Noor ApplyOnline apply-online allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2025-22717 | High | 7.5 | 2025-01-21 | Missing Authorization vulnerability in Joe Dolson My Tickets my-tickets allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects My T… |