CWE-862 · Missing Authorization (page 51)
Page 51 of 92 — CVEs classified under CWE-862, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-51667 | Medium | 4.3 | 2024-12-31 | Missing Authorization vulnerability in paytiumsupport Paytium paytium.This issue affects Paytium: from n/a through <= 4.4.10. |
CVE-2024-49698 | Medium | 4.3 | 2024-12-31 | Missing Authorization vulnerability in PriceListo Best Restaurant Menu by PriceListo best-restaurant-menu-by-pricelisto.This issue affects Best Restaurant Menu… |
CVE-2024-49694 | Medium | 5.3 | 2024-12-31 | Missing Authorization vulnerability in imw3 My Wp Brand my-wp-brand.This issue affects My Wp Brand: from n/a through <= 1.1.2. |
CVE-2024-49687 | Medium | 4.3 | 2024-12-31 | Missing Authorization vulnerability in storeapps Smart Manager smart-manager-for-wp-e-commerce.This issue affects Smart Manager: from n/a through <= 8.45.0. |
CVE-2024-49686 | Medium | 5.4 | 2024-12-31 | Missing Authorization vulnerability in fatcatapps Landing Page Cat landing-page-cat.This issue affects Landing Page Cat: from n/a through <= 1.7.4. |
CVE-2024-56067 | High | 7.5 | 2024-12-31 | Missing Authorization vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2024-56031 | Medium | 6.5 | 2024-12-31 | Missing Authorization vulnerability in Yulio Aleman Jimenez Smart Shopify Product smart-shopify-product allows Exploiting Incorrectly Configured Access Control… |
CVE-2024-55991 | Medium | 6.5 | 2024-12-31 | Missing Authorization vulnerability in Mario Peshev WP-CRM System wp-crm-system allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2023-50850 | Medium | 4.3 | 2024-12-31 | Missing Authorization vulnerability in Woo WooCommerce Subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-48775 | Medium | 5.3 | 2024-12-31 | Missing Authorization vulnerability in Gfazioli WP Cleanfix allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Clean… |
CVE-2024-56234 | Medium | 5.4 | 2024-12-31 | Missing Authorization vulnerability in vowelweb VW Automobile Lite vw-automobile-lite allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2024-56227 | Medium | 4.3 | 2024-12-31 | Missing Authorization vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2024-56225 | Medium | 5.4 | 2024-12-31 | Missing Authorization vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor allows Accessing Functionality Not Properly Constrained… |
CVE-2024-56219 | Medium | 4.3 | 2024-12-31 | Missing Authorization vulnerability in Marketing Fire Widget Options widget-options allows Exploiting Incorrectly Configured Access Control Security Levels.Thi… |
CVE-2024-56217 | Medium | 4.3 | 2024-12-31 | Missing Authorization vulnerability in Shahjada Download Manager download-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2024-56215 | Medium | 4.3 | 2024-12-31 | Missing Authorization vulnerability in DBAR Productions Member Directory and Contact Form pta-member-directory allows Exploiting Incorrectly Configured Access… |
CVE-2024-56211 | High | 8.8 | 2024-12-31 | Missing Authorization vulnerability in DeluxeThemes Userpro userpro.This issue affects Userpro: from n/a through <= 5.1.9. |
CVE-2024-56512 | Medium | 5.4 | 2024-12-28 | Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Paramet… |
CVE-2024-12955 | Medium | 4.3 | 2024-12-26 | A vulnerability has been found in PHPGurukul Blood Bank & Donor Management System 2.4 and classified as problematic. This vulnerability affects unknown code of… |
CVE-2024-11281 | Critical | 9.8 | 2024-12-25 | The WooCommerce Point of Sale plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 6.1.0. This is due to insufficie… |
CVE-2024-12413 | Medium | 5.3 | 2024-12-25 | The MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to unauthorized access due to missing capability chec… |
CVE-2024-12190 | Medium | 4.3 | 2024-12-25 | The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable… |
CVE-2024-12881 | High | 8.8 | 2024-12-24 | The PlugVersions – Easily rollback to previous versions of your plugins plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capabilit… |
CVE-2024-12594 | High | 8.8 | 2024-12-24 | The Custom Login Page Styler – Login Protected Private Site , Change wp-admin login url , WordPress login logo , Temporary admin login access , Rename login… |
CVE-2024-12210 | Medium | 4.3 | 2024-12-24 | The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on… |
CVE-2024-12617 | Medium | 5.4 | 2024-12-24 | The WC Price History for Omnibus plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX actions in all ver… |
CVE-2024-12266 | Medium | 6.5 | 2024-12-24 | The ELEX WooCommerce Dynamic Pricing and Discounts plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the e… |
CVE-2024-11852 | Medium | 4.3 | 2024-12-22 | The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) plugin for WordPress is vulnerable to unauthorize… |
CVE-2024-12558 | Medium | 6.5 | 2024-12-21 | The WP BASE Booking of Appointments, Services and Events plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on… |
CVE-2024-56349 | Medium | 5.3 | 2024-12-20 | In JetBrains TeamCity before 2024.12 improper access control allowed unauthorized users to modify build logs |
CVE-2024-12331 | Medium | 4.3 | 2024-12-19 | The File Manager Pro – Filester plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ajax_install_… |
CVE-2024-56048 | High | 8.8 | 2024-12-18 | Missing Authorization vulnerability in VibeThemes WPLMS wplms_plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPLMS… |
CVE-2024-54381 | High | 7.1 | 2024-12-18 | Missing Authorization vulnerability in Dotstore Advance Menu Manager advance-menu-manager.This issue affects Advance Menu Manager: from n/a through <= 3.1.1. |
CVE-2024-56008 | High | 7.5 | 2024-12-18 | Missing Authorization vulnerability in spreadr Spreadr Woocommerce spreadr-for-woocomerce allows Accessing Functionality Not Properly Constrained by ACLs.This… |
CVE-2024-55997 | Medium | 6.5 | 2024-12-18 | Missing Authorization vulnerability in webchunky Order Delivery & Pickup Location Date Time order-delivery-pickup-location-date-time-free-version allows Exploi… |
CVE-2024-52485 | Medium | 6.5 | 2024-12-18 | Missing Authorization vulnerability in Yudiz Solutions Ltd. WP Menu Image wp-menu-image allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2024-11926 | Medium | 6.5 | 2024-12-18 | The Travel Booking WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the '__stPartner… |
CVE-2024-12596 | Medium | 4.3 | 2024-12-18 | The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to arbitrary post deletion due to a missing capability check… |
CVE-2024-12259 | High | 8.8 | 2024-12-18 | The CRM WordPress Plugin – RepairBuddy plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3… |
CVE-2024-56003 | Medium | 4.3 | 2024-12-16 | Missing Authorization vulnerability in David Cramer Caldera SMTP Mailer caldera-smtp-mailer.This issue affects Caldera SMTP Mailer: from n/a through <= 1.0.1. |
CVE-2024-55999 | Medium | 5.3 | 2024-12-16 | Missing Authorization vulnerability in Marco Giannini XML Multilanguage Sitemap Generator xml-multilanguage-sitemap-generator.This issue affects XML Multilangu… |
CVE-2024-56009 | Medium | 5.3 | 2024-12-16 | Missing Authorization vulnerability in spreadr Spreadr Woocommerce spreadr-for-woocomerce allows Accessing Functionality Not Properly Constrained by ACLs.This… |
CVE-2024-56007 | Medium | 4.3 | 2024-12-16 | Missing Authorization vulnerability in leader codes Leader leader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Le… |
CVE-2024-56004 | Medium | 5.4 | 2024-12-16 | Missing Authorization vulnerability in awfowler Easy Site Importer easy-site-importer allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2024-56001 | Medium | 6.5 | 2024-12-16 | Missing Authorization vulnerability in ksher thailand Ksher ksher-payment allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2024-55998 | Medium | 5.4 | 2024-12-16 | Missing Authorization vulnerability in Eric Sloan Popup Surveys & Polls for WordPress (Mare.io) popup-surveys allows Exploiting Incorrectly Configured Access C… |
CVE-2024-55996 | Medium | 6.1 | 2024-12-16 | Missing Authorization vulnerability in dreamfox Dreamfox Media Payment gateway per Product for Woocommerce woocommerce-product-payments allows Exploiting Incor… |
CVE-2024-55994 | Medium | 4.3 | 2024-12-16 | Missing Authorization vulnerability in sohu 畅言评论系统 changyan allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 畅言评论系统… |
CVE-2024-55993 | Medium | 5.3 | 2024-12-16 | Missing Authorization vulnerability in PickPlugins Job Board Manager job-board-manager allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2024-55992 | Medium | 5.4 | 2024-12-16 | Missing Authorization vulnerability in Open Tools WooCommerce Basic Ordernumbers woocommerce-basic-ordernumbers allows Exploiting Incorrectly Configured Access… |
CVE-2024-54417 | Medium | 5.3 | 2024-12-16 | Missing Authorization vulnerability in pixelgrade PixProof pixproof allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects PixProof… |
CVE-2024-54402 | Medium | 4.3 | 2024-12-16 | Missing Authorization vulnerability in Mohamed Abd Elhalim Arabic Webfonts arabic-webfonts allows Exploiting Incorrectly Configured Access Control Security Lev… |
CVE-2024-54384 | Medium | 4.3 | 2024-12-16 | Missing Authorization vulnerability in Anh Tran Falcon – WordPress Optimizations & Tweaks falcon allows Exploiting Incorrectly Configured Access Control Securi… |
CVE-2024-54379 | High | 8.8 | 2024-12-16 | Missing Authorization vulnerability in blokhauswp Minterpress minterpress allows Privilege Escalation.This issue affects Minterpress: from n/a through <= 1.0.5. |
CVE-2024-54378 | High | 8.8 | 2024-12-16 | Missing Authorization vulnerability in Quietly Quietly Insights quietly-insights allows Privilege Escalation.This issue affects Quietly Insights: from n/a thro… |
CVE-2024-54369 | Critical | 9.1 | 2024-12-16 | Missing Authorization vulnerability in ThemeHunk Zita Site Builder ai-site-builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue a… |
CVE-2024-54359 | High | 8.2 | 2024-12-16 | Missing Authorization vulnerability in Saul Morales Pacheco Banner System banner-system allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2024-54354 | Medium | 6.5 | 2024-12-16 | Missing Authorization vulnerability in beat.k Termin-Kalender termin-kalender allows Stored XSS.This issue affects Termin-Kalender: from n/a through <= 0.99.47. |
CVE-2024-11715 | Medium | 4.8 | 2024-12-14 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to unauthorized access due to a missing c… |
CVE-2024-11712 | Medium | 5.3 | 2024-12-14 | The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to unauthorized access of data due to a m… |
CVE-2024-12553 | Medium | 6.5 | 2024-12-13 | GeoVision GV-ASManager Missing Authorization Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information… |
CVE-2024-54326 | Medium | 6.5 | 2024-12-13 | Missing Authorization vulnerability in Eyal Fitoussi GEO my WordPress geo-my-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2024-54323 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in Saad Iqbal New User Approve new-user-approve allows Exploiting Incorrectly Configured Access Control Security Levels.Thi… |
CVE-2024-54311 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in i.lychkov Mark New Posts mark-new-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2024-54310 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in Aslam Khan Gouran Gou Manage My Account Menu gou-wc-account-tabs allows Accessing Functionality Not Properly Constrained… |
CVE-2024-54298 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in sminozzi Car Dealer cardealer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2024-54289 | Medium | 6.5 | 2024-12-13 | Missing Authorization vulnerability in awesomesupport Awesome Support awesome-support allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2024-54278 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in Plugin Devs News Ticker for Elementor news-ticker-for-elementor allows Accessing Functionality Not Properly Constrained… |
CVE-2024-54271 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in Arni Cinco WPCargo Track & Trace wpcargo allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2024-54268 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in Greg - SiteOrigin SiteOrigin Widgets Bundle so-widgets-bundle allows Exploiting Incorrectly Configured Access Control Se… |
CVE-2024-54267 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in CreativeMindsSolutions CM Answers cm-answers allows Exploiting Incorrectly Configured Access Control Security Levels.Thi… |
CVE-2024-54256 | High | 7.1 | 2024-12-13 | Missing Authorization vulnerability in Seerox Easy Blocks pro easy-blocks-pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affect… |
CVE-2024-54252 | Medium | 6.3 | 2024-12-13 | Missing Authorization vulnerability in DOTonPAPER Pinpoint Booking System booking-system allows Exploiting Incorrectly Configured Access Control Security Level… |
CVE-2024-54242 | Medium | 6.5 | 2024-12-13 | Missing Authorization vulnerability in appsbd Simple Notification simple-notification allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2024-54241 | Medium | 6.5 | 2024-12-13 | Missing Authorization vulnerability in Appsbd Elite Notification – Sales Popup, Social Proof, FOMO & WooCommerce Notification allows Exploiting Incorrectly Con… |
CVE-2024-54239 | Critical | 9.8 | 2024-12-13 | Missing Authorization vulnerability in dugudlabs Eyewear prescription form eyewear-prescription-form allows Privilege Escalation.This issue affects Eyewear pre… |
CVE-2023-44149 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in BeRocket Brands for WooCommerce brands-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2023-44147 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in apasionados Comment Blacklist Updater comment-blacklist-updater allows Exploiting Incorrectly Configured Access Control… |
CVE-2023-44142 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in Deepen Bajracharya Inactive Logout inactive-logout allows Exploiting Incorrectly Configured Access Control Security Leve… |
CVE-2023-41952 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in Contact Form - WPManageNinja LLC FluentForm allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2023-41951 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in rtCamp rtMedia for WordPress, BuddyPress and bbPress allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2023-41875 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in wpdirectorykit.com WP Directory Kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2023-41873 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in miniOrange SAML SP Single Sign On allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2023-41870 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in Themeum WP Crowdfunding allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cr… |
CVE-2023-41869 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper (WAH) allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2023-41866 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in Team Plugins360 Automatic YouTube Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2023-41865 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in bqworks Slider Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Slider Pro… |
CVE-2023-41857 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in ClickToTweet.com Click To Tweet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2023-41849 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in WP Happy Coders Posts Like Dislike allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2023-41848 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in Majeed Raza Carousel Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects C… |
CVE-2023-41803 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in BitPay BitPay Checkout for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2023-41802 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in Team Heateor Super Socializer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-41695 | Low | 3.5 | 2024-12-13 | Missing Authorization vulnerability in Adnan Analytify wp-analytify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-41690 | Medium | 5.3 | 2024-12-13 | Missing Authorization vulnerability in Wiser Notify WiserNotify Social Proof allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2023-41689 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in Koen Reus Post to Google My Business (Google Business Profile) allows Exploiting Incorrectly Configured Access Control S… |
CVE-2023-41688 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in Mad Fish Digital Bulk NoIndex & NoFollow Toolkit allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2023-41683 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in Pechenki TelSender allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TelSender… |
CVE-2023-41671 | Medium | 5.4 | 2024-12-13 | Missing Authorization vulnerability in tychesoftwares Abandoned Cart Lite for WooCommerce woocommerce-abandoned-cart allows Exploiting Incorrectly Configured A… |
CVE-2023-41664 | Medium | 6.5 | 2024-12-13 | Missing Authorization vulnerability in AlphaBPO Easy Newsletter Signups allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2023-41649 | Medium | 6.5 | 2024-12-13 | Missing Authorization vulnerability in Ovic Team Ovic Product Bundle allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |