CWE-862 · Missing Authorization (page 55)
Page 55 of 100 — CVEs classified under CWE-862, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-31171 | Medium | 6.8 | 2025-04-07 | File read permission bypass vulnerability in the kernel file system module Impact: Successful exploitation of this vulnerability may affect service confidentia… |
CVE-2025-2789 | Medium | 5.3 | 2025-04-05 | The MultiVendorX – Empower Your WooCommerce Store with a Dynamic Multivendor Marketplace – Build the Next Amazon, eBay, Etsy plugin for WordPress is vulnerable… |
CVE-2025-1233 | Medium | 4.3 | 2025-04-05 | The Lafka Plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'lafka_options_upload' AJAX function in all versio… |
CVE-2024-13776 | High | 8.1 | 2025-04-05 | The ZoomSounds - WordPress Wave Audio Player with Playlist plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of… |
CVE-2025-2933 | High | 8.8 | 2025-04-05 | The Email Notifications for Updates plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a miss… |
CVE-2025-3257 | Medium | 4.3 | 2025-04-04 | A vulnerability classified as problematic has been found in xujiangfei admintwo 1.0. This affects an unknown part of the file /user/updateSet. The manipulation… |
CVE-2025-32277 | Medium | 4.3 | 2025-04-04 | Missing Authorization vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2025-32258 | Medium | 5.3 | 2025-04-04 | Missing Authorization vulnerability in InfoGiants Simple Website Logo simple-website-logo allows Exploiting Incorrectly Configured Access Control Security Leve… |
CVE-2025-32256 | Medium | 5.3 | 2025-04-04 | Missing Authorization vulnerability in devsoftbaltic SurveyJS surveyjs allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Surve… |
CVE-2025-32254 | Medium | 5.3 | 2025-04-04 | Missing Authorization vulnerability in Iqonic Design WPBookit wpbookit allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPBoo… |
CVE-2025-32253 | Medium | 5.3 | 2025-04-04 | Missing Authorization vulnerability in ComMotion Course Booking System course-booking-system allows Accessing Functionality Not Properly Constrained by ACLs.Th… |
CVE-2025-32252 | Medium | 5.3 | 2025-04-04 | Missing Authorization vulnerability in Black and White WP Genealogy – Your Family History Website wpgenealogy allows Exploiting Incorrectly Configured Access C… |
CVE-2025-32246 | Medium | 5.4 | 2025-04-04 | Missing Authorization vulnerability in Tim Nguyen 1-Click Backup & Restore Database 1-click-backup-restore-database-by-sunbytes allows Exploiting Incorrectly C… |
CVE-2025-32239 | Medium | 4.3 | 2025-04-04 | Missing Authorization vulnerability in Joao Romao Social Share Buttons & Analytics Plugin – GetSocial.io wp-share-buttons-analytics-by-getsocial allows Exploit… |
CVE-2025-32237 | Medium | 4.3 | 2025-04-04 | Missing Authorization vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Exploiting Incorrectly Configured Access Cont… |
CVE-2025-32235 | Medium | 4.3 | 2025-04-04 | Missing Authorization vulnerability in sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar mp3-music-player-by-sonaar allows Exploiting Incorrectly Co… |
CVE-2025-32234 | Medium | 4.3 | 2025-04-04 | Missing Authorization vulnerability in aleswebs AdMail – Multilingual Back in-Stock Notifier for WooCommerce admail allows Exploiting Incorrectly Configured Ac… |
CVE-2025-32233 | Medium | 4.3 | 2025-04-04 | Missing Authorization vulnerability in WP Chill Revive.so revive-so allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2025-32232 | Medium | 4.3 | 2025-04-04 | Missing Authorization vulnerability in ERA404 StaffList stafflist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects St… |
CVE-2025-32231 | Medium | 4.3 | 2025-04-04 | Missing Authorization vulnerability in Bookingor Bookingor bookingor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2025-32229 | Medium | 4.3 | 2025-04-04 | Missing Authorization vulnerability in Bowo Variable Inspector variable-inspector allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-32226 | Medium | 4.3 | 2025-04-04 | Missing Authorization vulnerability in Anzar Ahmed Display product variations dropdown on shop page display-product-variations-dropdown-on-shop-page allows Exp… |
CVE-2025-32225 | Medium | 5.3 | 2025-04-04 | Missing Authorization vulnerability in WP Event Manager WP Event Manager wp-event-manager allows Exploiting Incorrectly Configured Access Control Security Leve… |
CVE-2025-32224 | Medium | 5.4 | 2025-04-04 | Missing Authorization vulnerability in Shivam Mani Tripathi Privyr CRM Integration privy-crm-integration allows Exploiting Incorrectly Configured Access Contro… |
CVE-2025-32220 | Medium | 5.4 | 2025-04-04 | Missing Authorization vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Exploiting Incorrectly Configured Access Control Securit… |
CVE-2025-32219 | Medium | 5.4 | 2025-04-04 | Missing Authorization vulnerability in Syntactics, Inc. eaSYNC easync-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2025-32218 | Medium | 5.4 | 2025-04-04 | Missing Authorization vulnerability in RealMag777 TableOn posts-table-filterable allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2025-32217 | Medium | 5.4 | 2025-04-04 | Missing Authorization vulnerability in WP Messiah Ai Image Alt Text Generator for WP ai-image-alt-text-generator-for-wp allows Exploiting Incorrectly Configure… |
CVE-2025-32201 | Medium | 4.3 | 2025-04-04 | Missing Authorization vulnerability in Xpro Xpro Theme Builder xpro-theme-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-32178 | Medium | 5.4 | 2025-04-04 | Missing Authorization vulnerability in 6Storage 6Storage Rentals 6storage-rentals allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-32147 | High | 8.8 | 2025-04-04 | Missing Authorization vulnerability in coothemes Easy WP Optimizer easy-wp-optimizer allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2025-31381 | Medium | 6.5 | 2025-04-04 | Missing Authorization vulnerability in shiptrack Booking Calendar and Notification booking-calendar-and-notification allows Exploiting Incorrectly Configured A… |
CVE-2025-22285 | Medium | 6.5 | 2025-04-04 | Missing Authorization vulnerability in enituretechnology Pallet Packaging for WooCommerce pallet-packaging-for-woocommerce allows Exploiting Incorrectly Config… |
CVE-2025-2075 | High | 8.8 | 2025-04-04 | The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin for WordPress is vulnerable to Privilege Escalation in all versions up… |
CVE-2025-31909 | High | 7.5 | 2025-04-03 | Missing Authorization vulnerability in Apptivo Apptivo Business Site CRM apptivo-business-site allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2025-31896 | Medium | 6.5 | 2025-04-03 | Missing Authorization vulnerability in istmoplugins GetBookingsWP get-bookings-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-31876 | Medium | 5.8 | 2025-04-03 | Missing Authorization vulnerability in gunnarpayday Payday payday allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pa… |
CVE-2025-31858 | Medium | 6.5 | 2025-04-03 | Missing Authorization vulnerability in matthewrubin Local Magic local-magic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2025-31841 | Medium | 6.3 | 2025-04-03 | Missing Authorization vulnerability in Frank P. Walentynowicz FPW Category Thumbnails fpw-category-thumbnails allows Exploiting Incorrectly Configured Access C… |
CVE-2025-31795 | Medium | 6.5 | 2025-04-03 | Missing Authorization vulnerability in Plugin Devs Shopify to WooCommerce Migration migrate-shopify-to-woocommerce allows Exploiting Incorrectly Configured Acc… |
CVE-2025-31794 | Medium | 5.4 | 2025-04-03 | Missing Authorization vulnerability in Web Ready Now WR Price List Manager For Woocommerce wr-price-list-for-woocommerce allows Exploiting Incorrectly Configur… |
CVE-2025-31789 | Medium | 6.5 | 2025-04-03 | Missing Authorization vulnerability in Matat Technologies TextMe SMS textme-sms-integration allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2025-31768 | Medium | 6.5 | 2025-04-03 | Missing Authorization vulnerability in OTWthemes Widget Manager Light widget-manager-light allows Accessing Functionality Not Properly Constrained by ACLs.This… |
CVE-2025-31758 | Medium | 6.5 | 2025-04-03 | Missing Authorization vulnerability in BinaryCarpenter Free Woocommerce Product Table View free-product-table-for-woocommerce allows Exploiting Incorrectly Con… |
CVE-2025-31746 | Medium | 6.4 | 2025-04-03 | Missing Authorization vulnerability in Think201 Clients clients allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clie… |
CVE-2025-31739 | Medium | 6.4 | 2025-04-03 | Missing Authorization vulnerability in Manuel Schmalstieg Minimalistic Event Manager minimalistic-event-manager allows Exploiting Incorrectly Configured Access… |
CVE-2025-31736 | Medium | 6.5 | 2025-04-03 | Missing Authorization vulnerability in richtexteditor Rich Text Editor richtexteditor allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2025-31729 | Medium | 6.5 | 2025-04-03 | Missing Authorization vulnerability in jeffikus WooTumblog woo-tumblog allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2025-31581 | Medium | 6.5 | 2025-04-03 | Missing Authorization vulnerability in Sandeep Kumar WP Video Playlist wp-video-playlist allows Exploiting Incorrectly Configured Access Control Security Level… |
CVE-2025-31541 | Medium | 6.5 | 2025-04-03 | Missing Authorization vulnerability in TuriTop TuriTop Booking System turitop-booking-system allows Exploiting Incorrectly Configured Access Control Security L… |
CVE-2025-30916 | Medium | 6.5 | 2025-04-03 | Missing Authorization vulnerability in enituretechnology Residential Address Detection residential-address-detection allows Exploiting Incorrectly Configured A… |
CVE-2025-30915 | Medium | 6.5 | 2025-04-03 | Missing Authorization vulnerability in enituretechnology Small Package Quotes – Worldwide Express Edition small-package-quotes-wwe-edition allows Exploiting In… |
CVE-2025-3150 | Medium | 4.3 | 2025-04-03 | A vulnerability was found in itning Student Homework Management System up to 1.2.7. It has been declared as problematic. Affected by this vulnerability is an u… |
CVE-2025-31721 | Medium | 4.3 | 2025-04-02 | A missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers with Computer/Create permission but without Computer/Configur… |
CVE-2025-31720 | Medium | 4.3 | 2025-04-02 | A missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers with Computer/Create permission but without Computer/Extended… |
CVE-2025-3063 | High | 8.8 | 2025-04-02 | The Shopper Approved Reviews plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing cap… |
CVE-2024-13637 | Medium | 6.5 | 2025-04-02 | The Demo Awesome plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the install_plugin function in al… |
CVE-2025-2779 | Medium | 6.5 | 2025-04-02 | The Insert Headers and Footers Code – HT Script plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on th… |
CVE-2025-31628 | Medium | 5.3 | 2025-04-01 | Missing Authorization vulnerability in SlicedInvoices Sliced Invoices sliced-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2025-31580 | High | 7.5 | 2025-04-01 | Missing Authorization vulnerability in Anzar Ahmed Ni WooCommerce Product Enquiry ni-woocommerce-product-enquiry allows Accessing Functionality Not Properly Co… |
CVE-2025-31525 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in WP Messiah WP Mobile Bottom Menu mobile-bottom-menu-for-wp allows Exploiting Incorrectly Configured Access Control Secur… |
CVE-2025-30853 | Medium | 5.4 | 2025-04-01 | Missing Authorization vulnerability in ShortPixel ShortPixel Adaptive Images shortpixel-adaptive-images allows Exploiting Incorrectly Configured Access Control… |
CVE-2025-30825 | High | 8.8 | 2025-04-01 | Missing Authorization vulnerability in WPClever WPC Smart Linked Products - Upsells & Cross-sells for WooCommerce wpc-smart-linked-products allows Privilege Es… |
CVE-2025-31887 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in zookatron MyBookProgress by Stormhill Media mybookprogress allows Exploiting Incorrectly Configured Access Control Secur… |
CVE-2025-31886 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in Repuso Social proof testimonials and reviews by Repuso social-testimonials-and-reviews-widget allows Exploiting Incorrec… |
CVE-2025-31882 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2025-31881 | Medium | 5.4 | 2025-04-01 | Missing Authorization vulnerability in Stylemix Pearl pearl-header-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2025-31879 | Medium | 5.4 | 2025-04-01 | Missing Authorization vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Generator for WooCommerce embedding-barcodes-into-product-pages-and-orders all… |
CVE-2025-31878 | Medium | 5.4 | 2025-04-01 | Missing Authorization vulnerability in Dmitry V. (CEO of "UKR Solution") UPC/EAN/GTIN Code Generator upc-ean-barcode-generator allows Exploiting Incorrectly Co… |
CVE-2025-31877 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in Magnigenie RestroPress restropress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2025-31872 | Medium | 5.3 | 2025-04-01 | Missing Authorization vulnerability in Galaxy Weblinks WP Clone any post type wp-clone-any-post-type allows Exploiting Incorrectly Configured Access Control Se… |
CVE-2025-31870 | Medium | 5.4 | 2025-04-01 | Missing Authorization vulnerability in EXEIdeas International WP AutoKeyword wp-autokeyword allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2025-31868 | Medium | 5.3 | 2025-04-01 | Missing Authorization vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2025-31866 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in Ship Depot ShipDepot for WooCommerce ship-depot allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2025-31865 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in CartBoss CartBoss cartboss allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ca… |
CVE-2025-31863 | Medium | 5.3 | 2025-04-01 | Missing Authorization vulnerability in inspry Agency Toolkit agency-toolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2025-31862 | Medium | 5.3 | 2025-04-01 | Missing Authorization vulnerability in PickPlugins Job Board Manager job-board-manager allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2025-31856 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in brainvireinfo Export All Post Meta export-all-post-meta allows Accessing Functionality Not Properly Constrained by ACLs… |
CVE-2025-31854 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in Sharaz Shahid Simple Sticky Add To Cart For WooCommerce sticky-add-to-cart-woo allows Exploiting Incorrectly Configured… |
CVE-2025-31848 | Medium | 5.3 | 2025-04-01 | Missing Authorization vulnerability in WPFactory Adverts adverts-click-tracker allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2025-31846 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in Jeroen Schmit Theater for WordPress theatre allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-31843 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in Wilson OpenAI Tools for WordPress & WooCommerce openai-tools-for-wp-wc allows Exploiting Incorrectly Configured Access C… |
CVE-2025-31836 | Medium | 5.3 | 2025-04-01 | Missing Authorization vulnerability in matthewrubin Review Manager review-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-31834 | Medium | 5.3 | 2025-04-01 | Missing Authorization vulnerability in themeglow JobBoard Job listing job-board-light allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2025-31831 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in Team AtomChat AtomChat atomchat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2025-31830 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in Uriahs Victor Printus printus-cloud-printing-for-woocommerce allows Exploiting Incorrectly Configured Access Control Sec… |
CVE-2025-31826 | Medium | 5.4 | 2025-04-01 | Missing Authorization vulnerability in Anzar Ahmed Ni WooCommerce Cost Of Goods ni-woocommerce-cost-of-goods allows Exploiting Incorrectly Configured Access Co… |
CVE-2025-31822 | Medium | 5.3 | 2025-04-01 | Missing Authorization vulnerability in Ashish Ajani WP Simple HTML Sitemap wp-simple-html-sitemap allows Exploiting Incorrectly Configured Access Control Secur… |
CVE-2025-31820 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in webdevstudios Automatic Featured Images from Videos automatic-featured-images-from-videos allows Exploiting Incorrectly… |
CVE-2025-31816 | Medium | 5.4 | 2025-04-01 | Missing Authorization vulnerability in pietro Mobile App Canvas mobile-app allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2025-31810 | Medium | 5.3 | 2025-04-01 | Missing Authorization vulnerability in PickPlugins Question Answer question-answer allows Accessing Functionality Not Properly Constrained by ACLs.This issue a… |
CVE-2025-31802 | Medium | 5.4 | 2025-04-01 | Missing Authorization vulnerability in Shiptimize Shiptimize for WooCommerce shiptimize-for-woocommerce allows Exploiting Incorrectly Configured Access Control… |
CVE-2025-31799 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in publitio Publitio publitio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pu… |
CVE-2025-31798 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in publitio Publitio publitio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pu… |
CVE-2025-31791 | Medium | 5.4 | 2025-04-01 | Missing Authorization vulnerability in Oliver Boyers Pin Generator pin-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2025-31787 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in AudioTheme Cue cue allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cue: from… |
CVE-2025-31786 | Medium | 5.3 | 2025-04-01 | Missing Authorization vulnerability in Travis Simple Icons simple-icons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2025-31782 | Medium | 5.4 | 2025-04-01 | Missing Authorization vulnerability in pupunzi mb.YTPlayer wpmbytplayer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2025-31781 | Medium | 4.3 | 2025-04-01 | Missing Authorization vulnerability in ahmadshyk Gift Cards for WooCommerce woo-giftcards allows Exploiting Incorrectly Configured Access Control Security Leve… |
CVE-2025-31780 | Medium | 6.5 | 2025-04-01 | Missing Authorization vulnerability in Andy Stratton Append Content append-content allows Exploiting Incorrectly Configured Access Control Security Levels.This… |