CWE-862 · Missing Authorization (page 54)
Page 54 of 100 — CVEs classified under CWE-862, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-46489 | Medium | 5.3 | 2025-04-24 | Missing Authorization vulnerability in vinodvaswani9 Bulk Assign Linked Products For WooCommerce wc-bulk-assign-linked-products allows Accessing Functionality… |
CVE-2025-46485 | Medium | 5.3 | 2025-04-24 | Missing Authorization vulnerability in Carlo La Pera WP Customize Login Page wp-customize-login-page allows Accessing Functionality Not Properly Constrained by… |
CVE-2025-46470 | Medium | 4.3 | 2025-04-24 | Missing Authorization vulnerability in Peter Raschendorfer Smart Hashtags [#hashtagger] hashtagger allows Exploiting Incorrectly Configured Access Control Secu… |
CVE-2025-39390 | Medium | 5.3 | 2025-04-24 | Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Accessing Functionality Not… |
CVE-2025-39385 | Medium | 4.3 | 2025-04-24 | Missing Authorization vulnerability in vowelweb Sirat sirat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sirat: f… |
CVE-2021-47662 | High | 7.5 | 2025-04-24 | Due to missing authorization an unauthenticated remote attacker can cause a DoS attack by connecting via HTTPS and triggering the shutdown button. |
CVE-2025-3604 | Critical | 9.8 | 2025-04-24 | The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0. This is due to t… |
CVE-2025-3058 | High | 8.8 | 2025-04-24 | The Xelion Webchat plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability ch… |
CVE-2024-13307 | Medium | 5.3 | 2025-04-24 | The Reales WP - Real Estate WordPress Theme theme for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check o… |
CVE-2024-12244 | Medium | 4.3 | 2025-04-24 | An issue has been discovered in access controls could allow users to view certain restricted project information even when related features are disabled in Git… |
CVE-2025-1021 | High | 7.5 | 2025-04-23 | Missing authorization vulnerability in synocopy in Synology DiskStation Manager (DSM) before 7.1.1-42962-8, 7.2.1-69057-7 and 7.2.2-72806-3 allows remote attac… |
CVE-2025-37087 | Critical | 9.8 | 2025-04-22 | A vulnerability in the cmdb service of the HPE Performance Cluster Manager (HPCM) could allow an attacker to gain access to an arbitrary file on the server hos… |
CVE-2025-46247 | Medium | 5.3 | 2025-04-22 | Missing Authorization vulnerability in codepeople Appointment Booking Calendar appointment-booking-calendar allows Accessing Functionality Not Properly Constra… |
CVE-2025-46244 | Medium | 5.3 | 2025-04-22 | Missing Authorization vulnerability in Dotstore Advanced Linked Variations for Woocommerce linked-variation allows Exploiting Incorrectly Configured Access Con… |
CVE-2025-46232 | Medium | 4.3 | 2025-04-22 | Missing Authorization vulnerability in alttextai Download Alt Text AI alttext-ai allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2025-3843 | Medium | 4.3 | 2025-04-21 | A vulnerability was found in panhainan DS-Java 1.0. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross-sit… |
CVE-2025-28103 | Medium | 6.4 | 2025-04-21 | Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request. |
CVE-2025-2298 | | 2025-04-21 | An improper authorization vulnerability in Dremio Software allows authenticated users to delete arbitrary files that the system has access to, including system… | |
CVE-2025-3808 | Medium | 4.3 | 2025-04-19 | A vulnerability has been found in zhenfeng13 My-BBS 1.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross… |
CVE-2024-53591 | Critical | 9.8 | 2025-04-18 | An issue in the login page of Seclore v3.27.5.0 allows attackers to bypass authentication via a brute force attack. |
CVE-2025-3124 | Medium | 4.3 | 2025-04-17 | A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a user to see the names of private repositories that they wouldn'… |
CVE-2025-39583 | High | 7.1 | 2025-04-17 | Missing Authorization vulnerability in Bertha AI – Andrew Palmer BERTHA AI bertha-ai-free allows Exploiting Incorrectly Configured Access Control Security Leve… |
CVE-2025-39580 | Medium | 5.8 | 2025-04-17 | Missing Authorization vulnerability in jidaikobo Dashi dashi allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Dashi: from n/a… |
CVE-2025-39559 | Medium | 6.5 | 2025-04-17 | Missing Authorization vulnerability in Eivin Landa Bring Fraktguiden for WooCommerce bring-fraktguiden-for-woocommerce allows Exploiting Incorrectly Configured… |
CVE-2025-39554 | Medium | 6.5 | 2025-04-17 | Missing Authorization vulnerability in Elliot Sowersby / RelyWP AI Text to Speech ai-text-to-speech allows Exploiting Incorrectly Configured Access Control Sec… |
CVE-2025-39533 | High | 8.8 | 2025-04-17 | Missing Authorization vulnerability in Starfish Reviews Starfish Review Generation & Marketing starfish-reviews allows Privilege Escalation.This issue affects… |
CVE-2025-39532 | High | 7.5 | 2025-04-17 | Missing Authorization vulnerability in spicethemes Spice Blocks spice-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2025-39457 | Medium | 5.3 | 2025-04-17 | Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Confi… |
CVE-2025-39456 | Medium | 5.4 | 2025-04-17 | Missing Authorization vulnerability in iTRON WP Logger wp-data-logger allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2025-32620 | High | 7.1 | 2025-04-17 | Missing Authorization vulnerability in fromdoppler Doppler Forms doppler-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2025-32593 | High | 8.2 | 2025-04-17 | Missing Authorization vulnerability in Bytes Technolab Add Product Frontend for WooCommerce add-product-frontend-for-woocommerce allows Exploiting Incorrectly… |
CVE-2025-32544 | High | 7.5 | 2025-04-17 | Missing Authorization vulnerability in The Right Software WooCommerce Loyal Customers woocommerce-loyal-customer allows Accessing Functionality Not Properly Co… |
CVE-2025-27310 | Medium | 6.5 | 2025-04-17 | Missing Authorization vulnerability in Radius of Thought Page and Post Lister page-and-post-lister allows Exploiting Incorrectly Configured Access Control Secu… |
CVE-2025-26968 | High | 7.5 | 2025-04-17 | Missing Authorization vulnerability in webbernaut Cloak Front End Email allows Exploiting Incorrectly Configured Access Control Security Levels. This issue aff… |
CVE-2025-24737 | Medium | 6.5 | 2025-04-17 | Missing Authorization vulnerability in Mat Bao Corporation WP Helper Premium wp-helper-lite allows Accessing Functionality Not Properly Constrained by ACLs.Thi… |
CVE-2025-24583 | Medium | 6.5 | 2025-04-17 | Missing Authorization vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Exploiting Incorrectly Configured Access Control Securit… |
CVE-2025-24581 | Medium | 6.5 | 2025-04-17 | Missing Authorization vulnerability in Themefic Instantio instantio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2025-24577 | Medium | 6.5 | 2025-04-17 | Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2025-23958 | Medium | 6.5 | 2025-04-17 | Missing Authorization vulnerability in FADI MED Editor Wysiwyg Background Color editor-wysiwyg-background-color allows Exploiting Incorrectly Configured Access… |
CVE-2025-23906 | Medium | 6.5 | 2025-04-17 | Missing Authorization vulnerability in wpseek WordPress Dashboard Tweeter allows Exploiting Incorrectly Configured Access Control Security Levels. This issue a… |
CVE-2025-23773 | Medium | 6.5 | 2025-04-17 | Missing Authorization vulnerability in mingocommerce Delete All Posts allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affe… |
CVE-2025-31338 | | 2025-04-17 | A missing authorization vulnerability in the retrieve teacher Information function of Wisdom Master Pro versions 5.0 through 5.2 allows remote attackers to obt… | |
CVE-2025-39602 | Medium | 4.3 | 2025-04-16 | Missing Authorization vulnerability in WC Product Table WooCommerce Product Table Lite wc-product-table-lite allows Exploiting Incorrectly Configured Access Co… |
CVE-2025-39591 | Medium | 5.4 | 2025-04-16 | Missing Authorization vulnerability in WP Shuffle WP Subscription Forms wp-subscription-forms allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2025-39571 | Medium | 4.3 | 2025-04-16 | Missing Authorization vulnerability in WPXPO WowStore product-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2025-39560 | Medium | 5.4 | 2025-04-16 | Missing Authorization vulnerability in Shahjada Live Forms liveforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2025-39552 | Medium | 5.4 | 2025-04-16 | Missing Authorization vulnerability in Dylan James Zephyr Project Manager zephyr-project-manager allows Exploiting Incorrectly Configured Access Control Securi… |
CVE-2025-39545 | Medium | 5.4 | 2025-04-16 | Missing Authorization vulnerability in miniOrange WordPress REST API Authentication wp-rest-api-authentication allows Exploiting Incorrectly Configured Access… |
CVE-2025-39531 | Medium | 5.3 | 2025-04-16 | Missing Authorization vulnerability in slazzercom Slazzer Background Changer slazzer-background-changer allows Accessing Functionality Not Properly Constrained… |
CVE-2025-39522 | Medium | 5.4 | 2025-04-16 | Missing Authorization vulnerability in Service2Client LLC Dynamic Post dynamic-post allows Exploiting Incorrectly Configured Access Control Security Levels.Thi… |
CVE-2025-39513 | Medium | 5.3 | 2025-04-16 | Missing Authorization vulnerability in ActiveDEMAND Online Agency Marketing Automation ActiveDEMAND activedemand allows Accessing Functionality Not Properly Co… |
CVE-2025-3687 | Medium | 4.3 | 2025-04-16 | A vulnerability, which was classified as problematic, has been found in misstt123 oasys 1.0. Affected by this issue is some unknown functionality of the compon… |
CVE-2025-30960 | High | 8.3 | 2025-04-16 | Missing Authorization vulnerability in fs-code FS Poster fs-poster.This issue affects FS Poster: from n/a through <= 6.5.8. |
CVE-2025-27008 | High | 7.5 | 2025-04-15 | Missing Authorization vulnerability in NotFound Unlimited Timeline unlimited-timeline allows Accessing Functionality Not Properly Constrained by ACLs.This issu… |
CVE-2025-26953 | High | 7.5 | 2025-04-15 | Missing Authorization vulnerability in Crocoblock JetMenu jet-menu allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetMenu… |
CVE-2025-30716 | High | 7.5 | 2025-04-15 | Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). Supported versions that are aff… |
CVE-2025-32929 | High | 7.5 | 2025-04-15 | Missing Authorization vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Generator for WooCommerce embedding-barcodes-into-product-pages-and-orders all… |
CVE-2025-26959 | High | 8.8 | 2025-04-15 | Missing Authorization vulnerability in Quý Lê 91 Administrator Z administrator-z allows Privilege Escalation.This issue affects Administrator Z: from n/a throu… |
CVE-2025-26958 | High | 7.5 | 2025-04-15 | Missing Authorization vulnerability in Crocoblock JetBlog jet-blog allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetBlog… |
CVE-2025-26955 | Medium | 4.3 | 2025-04-15 | Missing Authorization vulnerability in vowelweb Industrial Lite industrial-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2025-26944 | High | 7.5 | 2025-04-15 | Missing Authorization vulnerability in Crocoblock JetPopup jet-popup allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetPopu… |
CVE-2025-26942 | High | 7.5 | 2025-04-15 | Missing Authorization vulnerability in Crocoblock JetTricks jet-tricks allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetTr… |
CVE-2025-26741 | High | 8.8 | 2025-04-15 | Missing Authorization vulnerability in AWEOS GmbH Email Notifications for Updates wp-update-mail-notification allows Privilege Escalation.This issue affects Em… |
CVE-2025-3561 | Medium | 4.3 | 2025-04-14 | A vulnerability was found in ghostxbh uzy-ssm-mall 1.0.0. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cro… |
CVE-2025-3557 | Medium | 4.3 | 2025-04-14 | A vulnerability, which was classified as problematic, has been found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected by this issue is some unknown fun… |
CVE-2025-32542 | High | 8.8 | 2025-04-11 | Missing Authorization vulnerability in EazyPlugins Eazy Plugin Manager plugins-on-steroids allows Exploiting Incorrectly Configured Access Control Security Lev… |
CVE-2025-31041 | High | 7.5 | 2025-04-11 | Missing Authorization vulnerability in AnyTrack AnyTrack Affiliate Link Manager anytrack-affiliate-link-manager allows Exploiting Incorrectly Configured Access… |
CVE-2025-32260 | Medium | 5.3 | 2025-04-10 | Missing Authorization vulnerability in Detheme DethemeKit For Elementor dethemekit-for-elementor.This issue affects DethemeKit For Elementor: from n/a through… |
CVE-2025-32259 | Medium | 5.3 | 2025-04-10 | Missing Authorization vulnerability in Alimir WP ULike wp-ulike.This issue affects WP ULike: from n/a through <= 4.7.9.1. |
CVE-2025-32244 | Medium | 6.5 | 2025-04-10 | Missing Authorization vulnerability in QuantumCloud SEO Help seo-help allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2025-32243 | Medium | 6.5 | 2025-04-10 | Missing Authorization vulnerability in Toast Plugins Internal Link Optimiser internal-link-finder allows Exploiting Incorrectly Configured Access Control Secur… |
CVE-2025-32242 | Medium | 6.5 | 2025-04-10 | Missing Authorization vulnerability in Hive Support Hive Support hive-support allows Accessing Functionality Not Properly Constrained by ACLs.This issue affect… |
CVE-2025-32240 | Medium | 6.5 | 2025-04-10 | Missing Authorization vulnerability in wpvsingh Site Notify site-notify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2025-32236 | Medium | 4.3 | 2025-04-10 | Missing Authorization vulnerability in Vagonic Woocommerce Products Reorder Drag Drop Multiple Sort – Sortable, Rearrange Products Vagonic vagonic-sortable.Thi… |
CVE-2025-32221 | Medium | 5.4 | 2025-04-10 | Missing Authorization vulnerability in Spider Themes EazyDocs eazydocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2025-32216 | Medium | 6.4 | 2025-04-10 | Missing Authorization vulnerability in Spider Themes Spider Elements spider-elements allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2025-32213 | Medium | 6.5 | 2025-04-10 | Missing Authorization vulnerability in flothemesplugins Flo Forms flo-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2025-32212 | Medium | 6.5 | 2025-04-10 | Missing Authorization vulnerability in Specia Theme Specia Companion specia-companion allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2025-32210 | Medium | 6.5 | 2025-04-10 | Missing Authorization vulnerability in CreativeMindsSolutions CM Registration and Invitation Codes cm-invitation-codes allows Exploiting Incorrectly Configured… |
CVE-2025-32208 | Medium | 6.5 | 2025-04-10 | Missing Authorization vulnerability in Hive Support Hive Support hive-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2025-3417 | High | 8.8 | 2025-04-10 | The Embedder plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on… |
CVE-2025-2719 | Medium | 6.5 | 2025-04-10 | The Swatchly – WooCommerce Variation Swatches for Products (product attributes: Image swatch, Color swatches, Label swatches) plugin for WordPress is vulnerabl… |
CVE-2025-26901 | Medium | 4.3 | 2025-04-09 | Missing Authorization vulnerability in Brizy Brizy Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brizy Pro: fr… |
CVE-2025-26888 | Medium | 5.3 | 2025-04-09 | Missing Authorization vulnerability in Amir Helzer WooCommerce Multilingual & Multicurrency woocommerce-multilingual allows Exploiting Incorrectly Configured A… |
CVE-2025-32684 | Medium | 5.0 | 2025-04-09 | Missing Authorization vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2025-32624 | High | 7.1 | 2025-04-09 | Missing Authorization vulnerability in czater Czater.pl – live chat i telefon czater allows Cross Site Request Forgery.This issue affects Czater.pl – live chat… |
CVE-2025-31377 | High | 7.5 | 2025-04-09 | Missing Authorization vulnerability in Asaquzzaman mishu Woo Product Feed For Marketing Channels woocommerce-to-google-merchant-center allows Exploiting Incorr… |
CVE-2025-31042 | Medium | 5.3 | 2025-04-09 | Missing Authorization vulnerability in rtakao Sandwich Adsense firsth3tagadsense allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2025-31012 | Medium | 5.3 | 2025-04-09 | Missing Authorization vulnerability in Phil Age Gate age-gate allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Age Gate: from… |
CVE-2025-31004 | Medium | 4.3 | 2025-04-09 | Missing Authorization vulnerability in Croover.inc Rich Table of Contents rich-table-of-content allows Exploiting Incorrectly Configured Access Control Securit… |
CVE-2025-32279 | Medium | 4.3 | 2025-04-08 | Missing Authorization vulnerability in Shahjada Live Forms liveforms.This issue affects Live Forms: from n/a through <= 4.8.5. |
CVE-2025-2876 | Medium | 5.3 | 2025-04-08 | The MelaPress Login Security and MelaPress Login Security Premium plugins for WordPress is vulnerable to unauthorized loss of data due to a missing capability… |
CVE-2025-2568 | Medium | 5.3 | 2025-04-08 | The Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce plugin for WordPress is vulnerable to unauthorized access and modification of data due to missin… |
CVE-2025-3437 | Medium | 4.3 | 2025-04-08 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability ch… |
CVE-2025-2807 | High | 8.8 | 2025-04-08 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary plugin installations due to a missing capability check… |
CVE-2025-30017 | Medium | 4.4 | 2025-04-08 | Due to a missing authorization check, an authenticated attacker could upload a file as a template for solution documentation in SAP Solution Manager 7.1. After… |
CVE-2025-27437 | Medium | 4.3 | 2025-04-08 | A Missing Authorization Check vulnerability exists in the Virus Scanner Interface of SAP NetWeaver Application Server ABAP. Because of this, an attacker authen… |
CVE-2025-27435 | Medium | 4.2 | 2025-04-08 | Under specific conditions and prerequisites, an unauthenticated attacker could access customer coupon codes exposed in the URL parameters of the Coupon Campaig… |
CVE-2025-27428 | High | 7.7 | 2025-04-08 | Due to directory traversal vulnerability, an authorized attacker could gain access to some critical information by using RFC enabled function module. Upon succ… |
CVE-2025-26657 | Medium | 5.3 | 2025-04-08 | SAP KMC WPC allows an unauthenticated attacker to remotely retrieve usernames by a simple parameter query which could expose sensitive information causing low… |