CWE-862 · Missing Authorization (page 54)
Page 54 of 92 — CVEs classified under CWE-862, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-47805 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Arraytics WPCafe wp-cafe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCa… |
CVE-2023-47793 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Acme Themes Acme Fix Images acme-fix-images allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2023-47780 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in flowdee EasyAzon easyazon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Eas… |
CVE-2023-47776 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Exploiting Incorrectly Configured Access Contr… |
CVE-2023-47764 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in metaphorcreations Ditty ditty-news-ticker allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2023-47763 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Northern Beaches Websites WP Custom Admin Interface wp-custom-admin-interface allows Exploiting Incorrectly Configured A… |
CVE-2023-47762 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in WPDeveloper BetterDocs betterdocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2023-47761 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in WPDeveloper Simple 301 Redirects by BetterLinks simple-301-redirects allows Exploiting Incorrectly Configured Access Con… |
CVE-2023-47760 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Secu… |
CVE-2023-47756 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in David Vongries Welcome Email Editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2023-47698 | High | 8.6 | 2024-12-09 | Missing Authorization vulnerability in shohei.tanaka Japanized For WooCommerce woocommerce-for-japan allows Exploiting Incorrectly Configured Access Control Se… |
CVE-2023-47694 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in appsbd Mini Cart Drawer For WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2023-32299 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in Anzar Ahmed Ni WooCommerce Sales Report ni-woocommerce-sales-report allows Exploiting Incorrectly Configured Access Cont… |
CVE-2023-32293 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Realwebcare WRC Pricing Tables allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2023-32126 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in WPoperation SALERT allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SALERT: fr… |
CVE-2023-32117 | Critical | 9.8 | 2024-12-09 | Missing Authorization vulnerability in SoftLab Integrate Google Drive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2023-32094 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Felix Welberg Extended Post Status allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2023-31214 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Arul Prasad J WP Quick Post Duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2023-31073 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Jose Vega Display custom fields in the frontend – Post and User Profile Fields allows Exploiting Incorrectly Configured… |
CVE-2023-30873 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Fahad Mahmood WP Docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs… |
CVE-2023-30870 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in wooproductimporter Sharkdropship for AliExpress Dropship and Affiliate allows Exploiting Incorrectly Configured Access C… |
CVE-2023-30783 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in YummyWP Smart WooCommerce Search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2023-30488 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Featured Post Creative allows Exploiting Incorrectly Configured Access Control Securi… |
CVE-2023-30486 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in HashThemes Square allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Square: fro… |
CVE-2023-30479 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Stamped.io Stamped.io Product Reviews & UGC for WooCommerce allows Exploiting Incorrectly Configured Access Control Secu… |
CVE-2023-30476 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Sparkle Themes Blogger Buzz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects B… |
CVE-2023-29433 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in 腾讯云 tencentcloud-cos allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects tencentc… |
CVE-2023-29431 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in OntheGoSystems qTranslate X Cleanup and WPML Import allows Exploiting Incorrectly Configured Access Control Security Lev… |
CVE-2023-29429 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in WPEverest User Registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects U… |
CVE-2023-29422 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in AlexaCRM Dynamics 365 Integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2023-29239 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in LuckyWP LuckyWP Scripts Control allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2023-29237 | Medium | 6.3 | 2024-12-09 | Missing Authorization vulnerability in Muhammad Rehman Remove Duplicate Posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2023-29173 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in AWESOME TOGI Product Category Tree allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2023-28689 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in JoomSky JS Job Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job… |
CVE-2023-28536 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Acato Branded Social Images allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects B… |
CVE-2023-28532 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in wpdirectorykit.com Real Estate Directory allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2023-28417 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in AlexaCRM Dynamics 365 Integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2023-28416 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Sparkle Themes Chankhe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chankh… |
CVE-2023-28168 | Low | 3.7 | 2024-12-09 | Missing Authorization vulnerability in Jerod Santo WordPress Console allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-28165 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Tech Banker Backup Bank: WordPress Backup Plugin allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2023-27626 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Aleksandar Urošević Stock Ticker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2023-27625 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Paul Ryley Site Reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site… |
CVE-2023-27454 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Apollo13Themes Rife Elementor Extensions & Templates allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2023-27449 | Medium | 6.3 | 2024-12-09 | Missing Authorization vulnerability in TotalSuite Total Poll Lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects To… |
CVE-2023-27428 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Damir Calusic WP users media allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-26522 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in OneWebsite WP Repost allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Repos… |
CVE-2023-26520 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Max Chirkov Advanced Text Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2023-25993 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in WebberZone Top 10 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Top 10: fro… |
CVE-2023-25966 | Medium | 5.5 | 2024-12-09 | Missing Authorization vulnerability in Ninja Team Filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird… |
CVE-2023-25959 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Apollo13Themes Apollo13 Framework Extensions allows Exploiting Incorrectly Configured Access Control Security Levels.Thi… |
CVE-2023-25791 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Cadus Pro Fontiran allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fontiran… |
CVE-2023-25714 | High | 7.5 | 2024-12-09 | Missing Authorization vulnerability in Fullworks Quick Paypal Payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2023-25703 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Meta slider and carousel with lightbox allows Exploiting Incorrectly Configured Acces… |
CVE-2023-25486 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a… |
CVE-2023-25469 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Magazine3 Easy Table of Contents allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2023-25455 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) allows Exploiting Incorrectly Config… |
CVE-2023-25454 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in Nate Reist Protected Posts Logout Button allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2023-25067 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Noah Hearle, Design Extreme We’re Open! allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2023-25060 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Album and Image Gallery plus Lightbox allows Exploiting Incorrectly Configured Access… |
CVE-2023-25048 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Fantastic Plugins Fantastic Content Protector Free allows Exploiting Incorrectly Configured Access Control Security Leve… |
CVE-2023-25037 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in CodePeople Booking Calendar Contact Form allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2023-25035 | Medium | 6.5 | 2024-12-09 | Missing Authorization vulnerability in Fullworks Quick Contact Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-25026 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in PayPal PayPal Brasil para WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2023-24407 | Medium | 5.0 | 2024-12-09 | Missing Authorization vulnerability in WpDevArt Booking calendar, Appointment Booking System allows Exploiting Incorrectly Configured Access Control Security L… |
CVE-2023-24375 | Low | 3.5 | 2024-12-09 | Missing Authorization vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) allows Exploiting Incorrectly Config… |
CVE-2023-23986 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in Noah Hearle, Design Extreme Reviews and Rating – Google My Business allows Exploiting Incorrectly Configured Access Cont… |
CVE-2023-23975 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Fullworks Quick Event Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-23895 | Medium | 4.7 | 2024-12-09 | Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2023-23893 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Igor Benic Simple Giveaways allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects S… |
CVE-2023-23887 | Medium | 5.3 | 2024-12-09 | Missing Authorization vulnerability in Shaon Easy Google Analytics for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2023-23886 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in mg12 WP-RecentComments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Rec… |
CVE-2023-23868 | Medium | 5.4 | 2024-12-09 | Missing Authorization vulnerability in WPFactory Cost of Goods for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2023-23834 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spec… |
CVE-2023-23825 | Low | 3.1 | 2024-12-09 | Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spec… |
CVE-2023-23823 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Clever Widgets Enhanced Text Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2023-23814 | Low | 3.8 | 2024-12-09 | Missing Authorization vulnerability in CodePeople CP Multi View Event Calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2023-23725 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Chris Baldelomar Shortcodes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects S… |
CVE-2023-23716 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Zendesk Zendesk Support for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2023-23715 | Medium | 5.2 | 2024-12-09 | Missing Authorization vulnerability in JobBoardWP JobBoardWP – Job Board Listings and Submissions allows Exploiting Incorrectly Configured Access Control Secur… |
CVE-2023-22708 | Medium | 4.3 | 2024-12-09 | Missing Authorization vulnerability in Karim Salman Kraken.io Image Optimizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2023-22701 | High | 7.5 | 2024-12-09 | Missing Authorization vulnerability in Shopfiles Ltd Ebook Store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ebo… |
CVE-2024-12349 | Medium | 4.3 | 2024-12-09 | A vulnerability was found in JFinalCMS 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/… |
CVE-2024-53473 | High | 7.5 | 2024-12-07 | WeGIA 3.2.0 before 3998672 does not verify permission to change a password. |
CVE-2024-12253 | Medium | 5.4 | 2024-12-07 | The Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal plugin for WordPress is vulnerable to unauthorized access due to a missing capability c… |
CVE-2024-7894 | Medium | 5.3 | 2024-12-07 | The If Menu plugin for WordPress is vulnerable to unauthorized modification of the plugin's license key due to a missing capability check on the 'actions' func… |
CVE-2024-12026 | Medium | 4.3 | 2024-12-07 | The Message Filter for Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the saveFilt… |
CVE-2024-11353 | Medium | 4.3 | 2024-12-07 | The SMS for Lead Capture Forms plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_message(… |
CVE-2024-53826 | Medium | 5.3 | 2024-12-06 | Missing Authorization vulnerability in WPSight WPCasa wpcasa allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPCasa: from n/… |
CVE-2024-53825 | Medium | 4.7 | 2024-12-06 | Missing Authorization vulnerability in Ninja Team Filebird filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2024-53813 | Medium | 6.5 | 2024-12-06 | Missing Authorization vulnerability in WP Travel WP Travel wp-travel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2024-53810 | Critical | 9.1 | 2024-12-06 | Missing Authorization vulnerability in N-Media Simple User Registration wp-registration allows Accessing Functionality Not Properly Constrained by ACLs.This is… |
CVE-2024-53806 | Medium | 5.4 | 2024-12-06 | Missing Authorization vulnerability in yonifre Maspik – Spam blacklist contact-forms-anti-spam allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2024-53805 | High | 7.5 | 2024-12-06 | Missing Authorization vulnerability in brandtoss WP Mailster wp-mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2024-53803 | Medium | 6.5 | 2024-12-06 | Missing Authorization vulnerability in brandtoss WP Mailster wp-mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2024-53799 | Medium | 4.3 | 2024-12-06 | Missing Authorization vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion allows Exploiting Incorrectly Configured Access Control Secur… |
CVE-2024-53795 | Medium | 5.3 | 2024-12-06 | Missing Authorization vulnerability in andy_moyle Church Admin church-admin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects… |
CVE-2024-9706 | Medium | 5.3 | 2024-12-06 | The Ultimate Coming Soon & Maintenance plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ucsm_ac… |
CVE-2024-9705 | Medium | 4.3 | 2024-12-06 | The Ultimate Coming Soon & Maintenance plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ucsm_u… |
CVE-2024-12155 | Critical | 9.8 | 2024-12-06 | The SV100 Companion plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability c… |
CVE-2024-12110 | Medium | 4.3 | 2024-12-06 | The Gold Addons for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the activate() and d… |