CWE-862 · Missing Authorization (page 51)
Page 51 of 100 — CVEs classified under CWE-862, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-5600 | Low | 3.1 | 2025-06-20 | An issue has been discovered in GitLab EE affecting all versions starting from 16.0 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions… |
CVE-2025-5121 | High | 8.5 | 2025-06-20 | An issue has been discovered in GitLab CE/EE affecting all versions from 17.11 before 17.11.4 and 18.0 before 18.0.2. A missing authorization check may have al… |
CVE-2025-52802 | High | 7.5 | 2025-06-20 | Missing Authorization vulnerability in enguerranws Import YouTube videos as WP Posts import-youtube-videos-as-wp-post allows Exploiting Incorrectly Configured… |
CVE-2025-50034 | Medium | 6.5 | 2025-06-20 | Missing Authorization vulnerability in Mahmudul Hasan Arif Enhanced Blocks – Page Builder Blocks for Gutenberg enhanced-blocks allows Exploiting Incorrectly Co… |
CVE-2025-50010 | Medium | 5.4 | 2025-06-20 | Missing Authorization vulnerability in Zapier Zapier for WordPress zapier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2025-50009 | Medium | 5.4 | 2025-06-20 | Missing Authorization vulnerability in Climax Themes Kata Plus kata-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2025-50008 | Medium | 5.4 | 2025-06-20 | Missing Authorization vulnerability in cscode WooCommerce Manager – Customize and Control Cart page, Add to Cart button, Checkout fields easily innovs-woo-mana… |
CVE-2025-49998 | Medium | 5.4 | 2025-06-20 | Missing Authorization vulnerability in Wetail WooCommerce Fortnox Integration woocommerce-fortnox-integration allows Exploiting Incorrectly Configured Access C… |
CVE-2025-49997 | Medium | 5.3 | 2025-06-20 | Missing Authorization vulnerability in Syed Balkhi Giveaways and Contests by RafflePress rafflepress allows Accessing Functionality Not Properly Constrained by… |
CVE-2025-49996 | Medium | 5.3 | 2025-06-20 | Missing Authorization vulnerability in osama.esh WP Visitor Statistics (Real Time Traffic) wp-stats-manager allows Accessing Functionality Not Properly Constra… |
CVE-2025-49993 | Medium | 5.3 | 2025-06-20 | Missing Authorization vulnerability in csarturas Cookie-Script.com cookie-script-com allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2025-49991 | Medium | 5.3 | 2025-06-20 | Missing Authorization vulnerability in tggfref WP-Recall allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WP-Recall: from n/… |
CVE-2025-49990 | Medium | 5.3 | 2025-06-20 | Missing Authorization vulnerability in contentstudio Contentstudio contentstudio allows Accessing Functionality Not Properly Constrained by ACLs.This issue aff… |
CVE-2025-49989 | Medium | 5.3 | 2025-06-20 | Missing Authorization vulnerability in App Cheap App Builder app-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2025-49988 | Medium | 5.3 | 2025-06-20 | Missing Authorization vulnerability in Renzo Johnson Contact Form 7 AWeber Extension integrate-contact-form-7-and-aweber allows Exploiting Incorrectly Configur… |
CVE-2025-49987 | Medium | 5.3 | 2025-06-20 | Missing Authorization vulnerability in WPFactory CRM ERP Business Solution crm-erp-business-solution allows Exploiting Incorrectly Configured Access Control Se… |
CVE-2025-49986 | Medium | 5.3 | 2025-06-20 | Missing Authorization vulnerability in thanhtungtnt Video List Manager video-list-manager allows Accessing Functionality Not Properly Constrained by ACLs.This… |
CVE-2025-49982 | Medium | 4.3 | 2025-06-20 | Missing Authorization vulnerability in aguilatechnologies WP Customer Area customer-area allows Exploiting Incorrectly Configured Access Control Security Level… |
CVE-2025-49981 | Medium | 4.3 | 2025-06-20 | Missing Authorization vulnerability in mahabub81 User Roles and Capabilities user-roles-and-capabilities allows Exploiting Incorrectly Configured Access Contro… |
CVE-2025-49980 | Medium | 4.3 | 2025-06-20 | Missing Authorization vulnerability in WP Event Manager WP User Profile Avatar wp-user-profile-avatar allows Exploiting Incorrectly Configured Access Control S… |
CVE-2025-49979 | Medium | 4.3 | 2025-06-20 | Missing Authorization vulnerability in slui Media Hygiene media-hygiene allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2025-49976 | Medium | 4.3 | 2025-06-20 | Missing Authorization vulnerability in WANotifier Notifier notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2025-49974 | Medium | 4.3 | 2025-06-20 | Missing Authorization vulnerability in upstreamplugin UpStream: a Project Management Plugin for WordPress upstream allows Exploiting Incorrectly Configured Acc… |
CVE-2025-49973 | Medium | 4.3 | 2025-06-20 | Missing Authorization vulnerability in GrandPlugins Image Sizes Controller, Create Custom Image Sizes, Disable Image Sizes image-sizes-controller allows Exploi… |
CVE-2025-49971 | Medium | 4.3 | 2025-06-20 | Missing Authorization vulnerability in aThemeArt Translations eDS Responsive Menu eds-responsive-menu allows Exploiting Incorrectly Configured Access Control S… |
CVE-2025-49970 | Medium | 4.3 | 2025-06-20 | Missing Authorization vulnerability in sparklewpthemes Hello FSE Blog hello-fse-blog allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2025-49969 | Medium | 4.3 | 2025-06-20 | Missing Authorization vulnerability in Zara 4 Zara 4 Image Compression zara-4 allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2024-53298 | Critical | 9.8 | 2025-06-20 | Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.1, contains a missing authorization vulnerability in the NFS export. An unauthenticated attacker with re… |
CVE-2025-6341 | Medium | 4.3 | 2025-06-20 | A vulnerability classified as problematic was found in code-projects School Fees Payment System 1.0. This vulnerability affects unknown code. The manipulation… |
CVE-2025-6284 | Medium | 4.3 | 2025-06-19 | A vulnerability was found in PHPGurukul Car Rental Portal 3.0. It has been declared as problematic. This vulnerability affects unknown code. The manipulation l… |
CVE-2025-4571 | Medium | 5.4 | 2025-06-19 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized view and modification of data due to an insufficient c… |
CVE-2025-23999 | Medium | 4.3 | 2025-06-18 | Missing Authorization vulnerability in Cloudways Breeze breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breez… |
CVE-2025-1562 | Critical | 9.8 | 2025-06-18 | The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to unauthorized arb… |
CVE-2025-49880 | Medium | 4.3 | 2025-06-17 | Missing Authorization vulnerability in Imran Tauqeer CubeWP Forms cubewp-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2025-49874 | Medium | 4.3 | 2025-06-17 | Missing Authorization vulnerability in tychesoftwares Arconix FAQ arconix-faq allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2025-49872 | Medium | 5.3 | 2025-06-17 | Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects myCred: from… |
CVE-2025-49864 | Medium | 5.3 | 2025-06-17 | Missing Authorization vulnerability in AFS Analytics AFS Analytics addfreestats allows Accessing Functionality Not Properly Constrained by ACLs.This issue affe… |
CVE-2025-49857 | Medium | 4.3 | 2025-06-17 | Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCr… |
CVE-2025-49234 | Medium | 6.5 | 2025-06-17 | Missing Authorization vulnerability in Deepak anand WP Dummy Content Generator wp-dummy-content-generator allows Exploiting Incorrectly Configured Access Contr… |
CVE-2025-6106 | Medium | 4.3 | 2025-06-16 | A vulnerability was found in WuKongOpenSource WukongCRM 9.0 and classified as problematic. This issue affects some unknown processing of the file AdminRoleCont… |
CVE-2025-6105 | Medium | 4.3 | 2025-06-16 | A vulnerability has been found in jflyfox jfinal_cms 5.0.1 and classified as problematic. This vulnerability affects unknown code of the file HOME.java. The ma… |
CVE-2025-48916 | Medium | 6.5 | 2025-06-13 | Missing Authorization vulnerability in Drupal Bookable Calendar allows Forceful Browsing.This issue affects Bookable Calendar: from 0.0.0 before 2.2.13. |
CVE-2025-5815 | Medium | 5.3 | 2025-06-13 | The Traffic Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tfcm_maybe_set_bot_flags()… |
CVE-2025-5282 | High | 7.5 | 2025-06-13 | The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability… |
CVE-2025-5288 | Critical | 9.8 | 2025-06-13 | The REST API | Custom API Generator For Cross Platform And Import Export In WP plugin for WordPress is vulnerable to Privilege Escalation due to a missing capa… |
CVE-2025-49181 | High | 8.6 | 2025-06-12 | Due to missing authorization of an API endpoint, unauthorized users can send HTTP GET requests to gather sensitive information. An attacker could also send HTT… |
CVE-2025-48444 | Medium | 5.3 | 2025-06-11 | Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing.This issue affects Quick Node Block: from 0.0.0 before 2.0.0. |
CVE-2025-48013 | Medium | 5.3 | 2025-06-11 | Missing Authorization vulnerability in Drupal Quick Node Block allows Forceful Browsing.This issue affects Quick Node Block: from 0.0.0 before 2.0.0. |
CVE-2025-29756 | | 2025-06-11 | SunGrow's back end users system iSolarCloud https://isolarcloud.com uses an MQTT service to transport data from the user's connected devices to the user's we… | |
CVE-2025-1055 | Medium | 5.6 | 2025-06-11 | A vulnerability in the K7RKScan.sys driver, part of the K7 Security Anti-Malware suite, allows a local low-privilege user to send crafted IOCTL requests to ter… |
CVE-2025-27505 | Medium | 5.3 | 2025-06-10 | GeoServer is an open source server that allows users to share and edit geospatial data. It is possible to bypass the default REST API security and access the i… |
CVE-2025-49509 | Medium | 5.3 | 2025-06-10 | Missing Authorization vulnerability in Roland Beaussant Audio Editor & Recorder audio-editor-recorder allows Exploiting Incorrectly Configured Access Control S… |
CVE-2025-42993 | Medium | 6.7 | 2025-06-10 | Due to a missing authorization check vulnerability in SAP S/4HANA (Enterprise Event Enablement), an attacker with access to the Inbound Binding Configuration c… |
CVE-2025-42991 | Medium | 4.3 | 2025-06-10 | SAP S/4HANA (Bank Account Application) does not perform necessary authorization checks. This allows an authenticated 'approver' user to delete attachment from… |
CVE-2025-42989 | Critical | 9.6 | 2025-06-10 | RFC inbound processing�does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploita… |
CVE-2025-42987 | Medium | 4.3 | 2025-06-10 | SAP Manage Processing Rules (For Bank Statement) allows an attacker with basic privileges to edit shared rules of any user by tampering the request parameter… |
CVE-2025-42984 | Medium | 5.4 | 2025-06-10 | SAP S/4HANA Manage Central Purchase Contract does not perform necessary authorization checks for an authenticated user. Due to this, an attacker could execute… |
CVE-2025-42983 | High | 8.5 | 2025-06-10 | SAP Business Warehouse and SAP Plug-In Basis allows an authenticated attacker to drop arbitrary SAP database tables, potentially resulting in a loss of data or… |
CVE-2025-42982 | High | 8.8 | 2025-06-10 | SAP GRC allows a non-administrative user to access and initiate transaction which could allow them to modify or control the transmitted system credentials. Thi… |
CVE-2025-5900 | Medium | 4.3 | 2025-06-09 | A vulnerability, which was classified as problematic, was found in Tenda AC9 15.03.02.13. This affects an unknown part. The manipulation leads to cross-site re… |
CVE-2025-5888 | Medium | 4.3 | 2025-06-09 | A vulnerability was found in jsnjfz WebStack-Guns 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The man… |
CVE-2025-49651 | High | 8.1 | 2025-06-09 | Missing Authorization in Lablup's BackendAI allows attackers to takeover all active sessions; Accessing, stealing, or altering any data accessible in the sessi… |
CVE-2025-49265 | High | 7.5 | 2025-06-09 | Missing Authorization vulnerability in WP Swings Membership For WooCommerce membership-for-woocommerce allows Accessing Functionality Not Properly Constrained… |
CVE-2025-48147 | Medium | 6.5 | 2025-06-09 | Missing Authorization vulnerability in Crypto Cloud CryptoCloud - Crypto Payment Gateway cryptocloud-crypto-payment-gateway allows Exploiting Incorrectly Confi… |
CVE-2025-48139 | Medium | 6.5 | 2025-06-09 | Missing Authorization vulnerability in relentlo StyleAI relentlosoftware allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Sty… |
CVE-2025-47527 | High | 7.1 | 2025-06-09 | Missing Authorization vulnerability in Icegram Icegram Collect icegram-rainmaker allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2025-47463 | High | 7.1 | 2025-06-09 | Missing Authorization vulnerability in Fahad Mahmood Stock Locations for WooCommerce stock-locations-for-woocommerce allows Exploiting Incorrectly Configured A… |
CVE-2025-32308 | High | 7.6 | 2025-06-09 | Missing Authorization vulnerability in looks_awesome Team Builder a-team-showcase allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-5885 | Medium | 4.3 | 2025-06-09 | A vulnerability has been found in Konica Minolta bizhub up to 20250202 and classified as problematic. This vulnerability affects unknown code. The manipulation… |
CVE-2025-5894 | High | 8.8 | 2025-06-09 | Smart Parking Management System from Honding Technology has a Missing Authorization vulnerability, allowing remote attackers with regular privileges to access… |
CVE-2025-5814 | Medium | 5.3 | 2025-06-07 | The Profiler – What Slowing Down Your WP plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpsd_… |
CVE-2025-47601 | High | 8.8 | 2025-06-07 | Missing Authorization vulnerability in Christiaan Pieterse MaxiBlocks maxi-blocks allows Privilege Escalation.This issue affects MaxiBlocks: from n/a through <… |
CVE-2025-5766 | Medium | 4.3 | 2025-06-06 | A vulnerability was found in code-projects Laundry System 1.0. It has been declared as problematic. This vulnerability affects unknown code. The manipulation l… |
CVE-2025-49441 | Medium | 5.3 | 2025-06-06 | Missing Authorization vulnerability in WP Map Plugins Interactive Regional Map of Florida interactive-map-of-florida allows Exploiting Incorrectly Configured A… |
CVE-2025-49324 | Medium | 5.3 | 2025-06-06 | Missing Authorization vulnerability in PickPlugins Job Board Manager job-board-manager allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2025-49320 | Medium | 5.3 | 2025-06-06 | Missing Authorization vulnerability in fraudlabspro FraudLabs Pro for WooCommerce fraudlabs-pro-for-woocommerce allows Exploiting Incorrectly Configured Access… |
CVE-2025-49293 | Medium | 4.3 | 2025-06-06 | Missing Authorization vulnerability in CodeRevolution Crawlomatic Multisite Scraper Post Generator crawlomatic-multipage-scraper-post-generator allows Exploiti… |
CVE-2025-49289 | Medium | 5.0 | 2025-06-06 | Missing Authorization vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-49288 | High | 8.8 | 2025-06-06 | Missing Authorization vulnerability in Rustaurius Ultimate WP Mail ultimate-wp-mail allows Authentication Bypass.This issue affects Ultimate WP Mail: from n/a… |
CVE-2025-49287 | Medium | 4.3 | 2025-06-06 | Missing Authorization vulnerability in WebToffee Product Feed for WooCommerce webtoffee-product-feed allows Exploiting Incorrectly Configured Access Control Se… |
CVE-2025-49272 | Medium | 4.3 | 2025-06-06 | Missing Authorization vulnerability in sergiotrinity Trinity Audio trinity-audio allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2025-49270 | Medium | 5.3 | 2025-06-06 | Missing Authorization vulnerability in Mario Peshev WP-CRM System wp-crm-system allows Accessing Functionality Not Properly Constrained by ACLs.This issue affe… |
CVE-2025-49268 | Medium | 5.3 | 2025-06-06 | Missing Authorization vulnerability in Soft8Soft LLC Verge3D verge3d allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2025-49248 | Medium | 4.3 | 2025-06-06 | Missing Authorization vulnerability in cmoreira Team Showcase team-showcase-cm allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2025-49246 | Medium | 4.3 | 2025-06-06 | Missing Authorization vulnerability in cmoreira Testimonials Showcase testimonials-showcase allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2025-49241 | Medium | 5.3 | 2025-06-06 | Missing Authorization vulnerability in bobbingwide oik oik allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects oik: from… |
CVE-2025-49240 | Medium | 4.3 | 2025-06-06 | Missing Authorization vulnerability in nK DocsPress docspress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DocsPr… |
CVE-2025-49236 | Medium | 5.3 | 2025-06-06 | Missing Authorization vulnerability in raychat Raychat raychat allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Raychat: from… |
CVE-2025-31000 | Medium | 5.3 | 2025-06-06 | Missing Authorization vulnerability in Miguel Fuentes Payment QR WooCommerce payment-qr-woo allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2025-30990 | Medium | 4.3 | 2025-06-06 | Missing Authorization vulnerability in ThemeHunk ThemeHunk themehunk-megamenu-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-30978 | Medium | 4.3 | 2025-06-06 | Missing Authorization vulnerability in Dor Zuberi Slack Notifications by dorzki dorzki-notifications-to-slack allows Exploiting Incorrectly Configured Access C… |
CVE-2025-30974 | Medium | 4.3 | 2025-06-06 | Missing Authorization vulnerability in Akhtarujjaman Shuvo Post Grid Master ajax-filter-posts allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2025-30958 | Medium | 5.4 | 2025-06-06 | Missing Authorization vulnerability in onOffice GmbH onOffice for WP-Websites onoffice-for-wp-websites allows Exploiting Incorrectly Configured Access Control… |
CVE-2025-30957 | Medium | 5.4 | 2025-06-06 | Missing Authorization vulnerability in BuddyDev Activity Plus Reloaded for BuddyPress bp-activity-plus-reloaded allows Exploiting Incorrectly Configured Access… |
CVE-2025-30945 | Medium | 5.3 | 2025-06-06 | Missing Authorization vulnerability in taskbuilder Taskbuilder taskbuilder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects T… |
CVE-2025-30934 | Medium | 5.3 | 2025-06-06 | Missing Authorization vulnerability in OLIVESYSTEM 診断ジェネレータ作成プラグイン os-diagnosis-generator allows Accessing Functionality Not Properly Constrained by ACLs.This… |
CVE-2025-30932 | Medium | 5.4 | 2025-06-06 | Missing Authorization vulnerability in WP Compress WP Compress for MainWP wp-compress-mainwp allows Exploiting Incorrectly Configured Access Control Security L… |
CVE-2025-30927 | Medium | 4.3 | 2025-06-06 | Missing Authorization vulnerability in Wordapp Team Wordapp wordapp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2025-30636 | Medium | 5.4 | 2025-06-06 | Missing Authorization vulnerability in Ability, Inc Accessibility Suite online-accessibility allows Exploiting Incorrectly Configured Access Control Security L… |
CVE-2025-30624 | Medium | 4.3 | 2025-06-06 | Missing Authorization vulnerability in WordLift WordLift wordlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wo… |