CWE-862 · Missing Authorization (page 52)
Page 52 of 100 — CVEs classified under CWE-862, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-29013 | Medium | 5.4 | 2025-06-06 | Missing Authorization vulnerability in faaiq Custom Category/Post Type Post order custom-post-order-category allows Exploiting Incorrectly Configured Access Co… |
CVE-2025-29010 | Medium | 4.3 | 2025-06-06 | Missing Authorization vulnerability in eleopard Behance Portfolio Manager portfolio-manager-powered-by-behance allows Exploiting Incorrectly Configured Access… |
CVE-2025-29006 | Medium | 5.3 | 2025-06-06 | Missing Authorization vulnerability in centangle Direct Checkout for WooCommerce Lite woo-direct-checkout-lite allows Accessing Functionality Not Properly Cons… |
CVE-2025-28997 | Medium | 5.3 | 2025-06-06 | Missing Authorization vulnerability in EXEIdeas International WP AutoKeyword wp-autokeyword allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2025-28996 | Medium | 4.3 | 2025-06-06 | Missing Authorization vulnerability in Thad Allender GPP Slideshow gpp-slideshow allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2025-28995 | Medium | 5.3 | 2025-06-06 | Missing Authorization vulnerability in viralloops Viral Loops WP Integration viral-loops-wp-integration allows Exploiting Incorrectly Configured Access Control… |
CVE-2025-28994 | Medium | 4.3 | 2025-06-06 | Missing Authorization vulnerability in viralloops Viral Loops WP Integration viral-loops-wp-integration allows Exploiting Incorrectly Configured Access Control… |
CVE-2025-28985 | Medium | 5.4 | 2025-06-06 | Missing Authorization vulnerability in Elastic Email Elastic Email Subscribe Form elastic-email-subscribe-form allows Exploiting Incorrectly Configured Access… |
CVE-2025-24778 | Medium | 5.4 | 2025-06-06 | Missing Authorization vulnerability in De paragon No Spam At All no-spam-at-all allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2025-24776 | Medium | 5.4 | 2025-06-06 | Missing Authorization vulnerability in codelobster Responsive Flipbooks responsive-flipbooks allows Exploiting Incorrectly Configured Access Control Security L… |
CVE-2025-24763 | Medium | 5.3 | 2025-06-06 | Missing Authorization vulnerability in Pascal Casier bbPress API bbp-api allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2025-24762 | Medium | 5.4 | 2025-06-06 | Missing Authorization vulnerability in facturaone TicketBAI Facturas para WooCommerce wp-ticketbai allows Exploiting Incorrectly Configured Access Control Secu… |
CVE-2025-23971 | Medium | 5.3 | 2025-06-06 | Missing Authorization vulnerability in whassan KI Live Video Conferences ki-live-video-conferences allows Exploiting Incorrectly Configured Access Control Secu… |
CVE-2023-26002 | Medium | 4.3 | 2025-06-06 | Missing Authorization vulnerability in 6Storage 6Storage Rentals allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects 6S… |
CVE-2023-25997 | Medium | 6.5 | 2025-06-06 | Missing Authorization vulnerability in SolaPlugins Sola Support Ticket allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affe… |
CVE-2025-48337 | Medium | 5.3 | 2025-06-06 | Missing Authorization vulnerability in QuickcabWP QuickCab.This issue affects QuickCab: from n/a through 1.3.3. |
CVE-2025-48335 | Medium | 5.4 | 2025-06-06 | Missing Authorization vulnerability in CyberChimps Responsive Plus responsive-add-ons allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2025-48784 | High | 7.5 | 2025-06-06 | A missing authorization vulnerability in Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to modify system… |
CVE-2025-5732 | Medium | 4.3 | 2025-06-06 | A vulnerability, which was classified as problematic, was found in code-projects Traffic Offense Reporting System 1.0. This affects an unknown part. The manipu… |
CVE-2025-5486 | Critical | 9.8 | 2025-06-06 | The WP Email Debug plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the WPMDBUG_handle_settings() function in ve… |
CVE-2025-5018 | High | 7.1 | 2025-06-06 | The Hive Support plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the hs_update_ai_chat_… |
CVE-2025-1778 | Medium | 4.3 | 2025-06-06 | The Art Theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'arttheme_theme_option_restore' AJAX function in all… |
CVE-2025-1777 | Medium | 6.4 | 2025-06-06 | The BM Content Builder plugin for WordPress is vulnerable to unauthorized modification of data to a missing capability check on the 'ux_cb_page_options_save' f… |
CVE-2025-48133 | Medium | 6.5 | 2025-06-05 | Missing Authorization vulnerability in Uncanny Owl Uncanny Automator uncanny-automator allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2025-46258 | Medium | 5.4 | 2025-06-05 | Missing Authorization vulnerability in BdThemes Element Pack Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ele… |
CVE-2025-5701 | High | 8.8 | 2025-06-05 | The HyperComments plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability che… |
CVE-2025-5521 | Medium | 4.3 | 2025-06-03 | A vulnerability was found in WuKongOpenSource WukongCRM 9.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-48998 | High | 8.8 | 2025-06-03 | DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.6, a bypass of the patch for CVE-2025-27103 allows authenti… |
CVE-2025-45854 | Critical | 10.0 | 2025-06-03 | /server/executeExec of JEHC-BPM 2.0.1 allows attackers to execute arbitrary code via execParams. |
CVE-2025-4047 | Medium | 4.3 | 2025-06-03 | The Broken Link Checker plugin for WordPress is vulnerable to unauthorized data access due to a missing capability check on the ajax_full_status and ajax_dashb… |
CVE-2025-47585 | Medium | 6.5 | 2025-06-02 | Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Accessing Functionality Not… |
CVE-2025-5410 | Medium | 4.3 | 2025-06-01 | A vulnerability was found in Mist Community Edition up to 4.7.1. It has been declared as problematic. This vulnerability affects the function session_start_res… |
CVE-2025-4597 | Medium | 6.5 | 2025-05-30 | The Woo Slider Pro – Drag Drop Slider Builder For WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabili… |
CVE-2025-48334 | Medium | 6.5 | 2025-05-30 | Missing Authorization vulnerability in BinaryCarpenter Woo Slider Pro woo-slider-pro-drag-drop-slider-builder-for-woocommerce allows Exploiting Incorrectly Con… |
CVE-2025-4431 | Medium | 4.3 | 2025-05-30 | The Featured Image Plus – Quick & Bulk Edit with Unsplash plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability c… |
CVE-2025-46823 | | 2025-05-29 | openmrs-module-fhir2 provides the FHIR REST API and related services for OpenMRS, an open medical records system. In versions of the FHIR2 module prior to 2.5… | |
CVE-2024-47055 | Medium | 4.3 | 2025-05-28 | SummaryThis advisory addresses a security vulnerability in Mautic related to the segment cloning functionality. This vulnerability allows any authenticated use… |
CVE-2025-40673 | | 2025-05-28 | A Missing Authorization vulnerability has been found in DinoRANK. This vulnerability allows an attacker to access invoices of any user via accessing endpoint… | |
CVE-2024-54020 | Low | 2.3 | 2025-05-28 | A missing authorization in Fortinet FortiManager versions 7.2.0 through 7.2.1, and versions 7.0.0 through 7.0.7 may allow an authenticated attacker to overwrit… |
CVE-2025-5117 | High | 8.8 | 2025-05-27 | The Property plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the use of the property_package_user_role metadata… |
CVE-2025-2407 | | 2025-05-27 | Missing Authentication & Authorization in Web-API in Mobatime AMX MTAPI v6 on IIS allows adversaries to unrestricted access via the network. The vulnerability… | |
CVE-2025-4683 | Medium | 4.3 | 2025-05-27 | The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabil… |
CVE-2025-5185 | Medium | 4.3 | 2025-05-26 | A vulnerability was found in Summer Pearl Group Vacation Rental Management Platform up to 1.0.1. It has been declared as problematic. Affected by this vulnerab… |
CVE-2025-40667 | Medium | 6.5 | 2025-05-26 | Missing authorization vulnerability in TCMAN's GIM v11. This allows an authenticated attacker to access any functionality of the application even when they are… |
CVE-2025-5132 | Medium | 4.3 | 2025-05-24 | A vulnerability was found in Tmall Demo up to 20250505. It has been rated as problematic. This issue affects some unknown processing of the file tmall/admin/ac… |
CVE-2025-48275 | Medium | 6.5 | 2025-05-23 | Missing Authorization vulnerability in dastan800 Visual Header visual-header allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2025-48271 | Medium | 6.5 | 2025-05-23 | Missing Authorization vulnerability in Leadinfo Leadinfo leadinfo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Le… |
CVE-2025-47690 | High | 8.8 | 2025-05-23 | Missing Authorization vulnerability in Smackcoders Inc., Lead Form Data Collection to CRM wp-leads-builder-any-crm allows Privilege Escalation.This issue affec… |
CVE-2025-47619 | Medium | 6.5 | 2025-05-23 | Missing Authorization vulnerability in 6Storage 6Storage Rentals 6storage-rentals allows Path Traversal.This issue affects 6Storage Rentals: from n/a through <… |
CVE-2025-47558 | High | 7.5 | 2025-05-23 | Missing Authorization vulnerability in RomanCode MapSVG mapsvg allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MapSVG: from… |
CVE-2025-47529 | Medium | 6.5 | 2025-05-23 | Missing Authorization vulnerability in UX Design Experts Experto CTA Widget – Call To Action, Sticky CTA, Floating Button Plugin experto-cta-widget allows Expl… |
CVE-2025-46488 | High | 7.1 | 2025-05-23 | Missing Authorization vulnerability in dastan800 Visual Builder visual-builder allows Reflected XSS.This issue affects Visual Builder: from n/a through <= 1.2… |
CVE-2025-39536 | High | 8.2 | 2025-05-23 | Missing Authorization vulnerability in Chimpstudio JobHunt Job Alerts allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affec… |
CVE-2025-2506 | Medium | 5.3 | 2025-05-22 | When pglogical attempts to replicate data, it does not verify it is using a replication connection, which means a user with CONNECT access to a database config… |
CVE-2025-47942 | Medium | 5.3 | 2025-05-21 | The Open edX Platform is a learning management platform. Prior to commit 6740e75c0fdc7ba095baf88e9f5e4f3e15cfd8ba, edxapp has no built-in protection against do… |
CVE-2025-5033 | Medium | 4.3 | 2025-05-21 | A vulnerability classified as problematic was found in XiaoBingby TeaCMS 2.0.2. Affected by this vulnerability is an unknown functionality of the file src/main… |
CVE-2025-48009 | Low | 3.1 | 2025-05-21 | Missing Authorization vulnerability in Drupal Single Content Sync allows Functionality Misuse.This issue affects Single Content Sync: from 0.0.0 before 1.4.12. |
CVE-2025-4105 | Medium | 5.4 | 2025-05-21 | The Splitit plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on several functions in the 'splitIt-flexf… |
CVE-2025-41231 | High | 7.3 | 2025-05-20 | VMware Cloud Foundation contains a missing authorisation vulnerability. A malicious actor with access to VMware Cloud Foundation appliance may be able to perfo… |
CVE-2025-39352 | High | 8.2 | 2025-05-19 | Missing Authorization vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-39350 | High | 8.2 | 2025-05-19 | Missing Authorization vulnerability in Rocket Apps wProject.This issue affects wProject: from n/a before 5.8.0. |
CVE-2025-43838 | Medium | 6.5 | 2025-05-19 | Missing Authorization vulnerability in ChoPlugins.com Custom PC Builder Lite for WooCommerce custom-pc-builder-lite-for-woocommerce allows Exploiting Incorrect… |
CVE-2025-39451 | High | 7.5 | 2025-05-19 | Missing Authorization vulnerability in Crocoblock JetBlocks For Elementor jet-blocks allows Accessing Functionality Not Properly Constrained by ACLs.This issue… |
CVE-2025-39449 | High | 7.5 | 2025-05-19 | Missing Authorization vulnerability in Crocoblock JetWooBuilder jet-woo-builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affe… |
CVE-2025-39447 | High | 7.5 | 2025-05-19 | Missing Authorization vulnerability in Crocoblock JetElements For Elementor jet-elements allows Accessing Functionality Not Properly Constrained by ACLs.This i… |
CVE-2025-39460 | Medium | 5.3 | 2025-05-19 | Missing Authorization vulnerability in ThimPress Eduma eduma allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Eduma… |
CVE-2025-39454 | Medium | 4.3 | 2025-05-19 | Missing Authorization vulnerability in Jeroen Peters Name Directory name-directory.This issue affects Name Directory: from n/a through <= 1.30.0. |
CVE-2025-39412 | Medium | 4.3 | 2025-05-19 | Missing Authorization vulnerability in averta Master Slider master-slider.This issue affects Master Slider: from n/a through <= 3.11.0. |
CVE-2025-39398 | Medium | 4.3 | 2025-05-19 | Missing Authorization vulnerability in Themovation Bellevue bellevuex.This issue affects Bellevue: from n/a through <= 4.2.2. |
CVE-2025-22287 | Medium | 5.4 | 2025-05-19 | Missing Authorization vulnerability in enituretechnology LTL Freight Quotes – FreightQuote Edition ltl-freight-quotes-freightquote-edition allows Exploiting In… |
CVE-2025-39388 | Medium | 5.3 | 2025-05-19 | Missing Authorization vulnerability in Solid Plugins AnalyticsWP allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects AnalyticsWP… |
CVE-2025-39376 | Medium | 4.3 | 2025-05-19 | Missing Authorization vulnerability in QuanticaLabs Car Park Booking System for WordPress car-park-booking-system-for-wordpress.This issue affects Car Park Boo… |
CVE-2025-39373 | Medium | 5.3 | 2025-05-19 | Missing Authorization vulnerability in jegtheme JNews jnews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JNews: f… |
CVE-2025-39368 | Medium | 5.3 | 2025-05-19 | Missing Authorization vulnerability in ed4becky Rootspersona rootspersona allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2025-39353 | Medium | 5.3 | 2025-05-19 | Missing Authorization vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-26920 | Medium | 5.4 | 2025-05-19 | Missing Authorization vulnerability in pressmaximum Customify customify-theme allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2025-26867 | Medium | 5.3 | 2025-05-19 | Missing Authorization vulnerability in Themes4WP Bulk allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bulk: from n/a through… |
CVE-2025-48346 | Medium | 5.3 | 2025-05-19 | Missing Authorization vulnerability in Embed360 Embed and Integrate Etsy Shop embed-and-integrate-etsy-shop allows Accessing Functionality Not Properly Constra… |
CVE-2025-48282 | Medium | 5.3 | 2025-05-19 | Missing Authorization vulnerability in Majestic Support Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Leve… |
CVE-2025-48272 | Medium | 5.3 | 2025-05-19 | Missing Authorization vulnerability in wpjobportal WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2025-48268 | Medium | 4.3 | 2025-05-19 | Missing Authorization vulnerability in Guru Team Bot for Telegram on WooCommerce bot-for-telegram-on-woocommerce allows Exploiting Incorrectly Configured Acces… |
CVE-2025-48262 | Medium | 4.3 | 2025-05-19 | Missing Authorization vulnerability in M.Code Url Rewrite Analyzer url-rewrite-analyzer allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2025-48260 | Medium | 4.3 | 2025-05-19 | Missing Authorization vulnerability in Ninja Team GDPR CCPA Compliance Support ninja-gdpr-compliance allows Exploiting Incorrectly Configured Access Control Se… |
CVE-2025-48257 | Medium | 6.5 | 2025-05-19 | Missing Authorization vulnerability in Projectopia Projectopia projectopia-core allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2025-48247 | Medium | 4.3 | 2025-05-19 | Missing Authorization vulnerability in Blair Williams Shortlinks by Pretty Links pretty-link allows Exploiting Incorrectly Configured Access Control Security L… |
CVE-2025-48246 | Medium | 5.4 | 2025-05-19 | Missing Authorization vulnerability in StellarWP The Events Calendar the-events-calendar allows Exploiting Incorrectly Configured Access Control Security Level… |
CVE-2025-48242 | Medium | 6.5 | 2025-05-19 | Missing Authorization vulnerability in wpWax Legal Pages legal-pages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2025-4477 | High | 7.2 | 2025-05-19 | The ThreatSonar Anti-Ransomware from TeamT5 has a Privilege Escalation vulnerability, allowing remote attackers with intermediate privileges to escalate their… |
CVE-2025-4887 | Medium | 4.3 | 2025-05-18 | A vulnerability, which was classified as problematic, has been found in SourceCodester Online Student Clearance System 1.0. Affected by this issue is some unkn… |
CVE-2025-3527 | Medium | 6.4 | 2025-05-17 | The EventON Pro plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check in the 'assets/lib/settings/settings… |
CVE-2025-48138 | Medium | 4.3 | 2025-05-16 | Missing Authorization vulnerability in Bertha AI – Andrew Palmer BERTHA AI bertha-ai-free allows Exploiting Incorrectly Configured Access Control Security Leve… |
CVE-2025-48128 | Medium | 4.3 | 2025-05-16 | Missing Authorization vulnerability in Sharespine Sharespine Woocommerce Connector sharespine-woocommerce-connector allows Exploiting Incorrectly Configured Ac… |
CVE-2025-48127 | Medium | 6.5 | 2025-05-16 | Missing Authorization vulnerability in App Cheap Push notification for Mobile and Web app push-notification-mobile-and-web-app allows Exploiting Incorrectly Co… |
CVE-2025-48117 | Medium | 5.3 | 2025-05-16 | Missing Authorization vulnerability in kilbot WooCommerce POS woocommerce-pos allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2025-48116 | Medium | 5.3 | 2025-05-16 | Missing Authorization vulnerability in Ashan Perera EventON eventon-lite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Eve… |
CVE-2025-48079 | Medium | 4.3 | 2025-05-16 | Missing Authorization vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Exploiting Incorrectly Configured Access… |
CVE-2025-47564 | Medium | 5.3 | 2025-05-16 | Missing Authorization vulnerability in ashanjay EventON eventon allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects EventON: fro… |
CVE-2025-47563 | Medium | 5.3 | 2025-05-16 | Missing Authorization vulnerability in villatheme CURCY woocommerce-multi-currency allows Accessing Functionality Not Properly Constrained by ACLs.This issue a… |
CVE-2025-47560 | Medium | 5.0 | 2025-05-16 | Missing Authorization vulnerability in RomanCode MapSVG mapsvg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MapSV… |
CVE-2025-47556 | Medium | 5.4 | 2025-05-16 | Missing Authorization vulnerability in QuanticaLabs CSS3 Compare Pricing Tables for WordPress css3_web_pricing_tables_grids allows Exploiting Incorrectly Confi… |