CWE-862 · Missing Authorization (page 56)
Page 56 of 92 — CVEs classified under CWE-862, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-10629 | High | 8.8 | 2024-11-13 | The GPX Viewer plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check and file type validation in the gpxv_file_upload… |
CVE-2024-8074 | | 2024-11-12 | Missing Authentication for Critical Function, Missing Authorization vulnerability in Nomysoft Informatics Nomysem allows Collect Data as Provided by Users. Th… | |
CVE-2024-11125 | Medium | 4.3 | 2024-11-12 | A vulnerability was found in GetSimpleCMS 3.3.16 and classified as problematic. This issue affects some unknown processing of the file /admin/profile.php. The… |
CVE-2024-47587 | Low | 3.5 | 2024-11-12 | Cash Operations does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges causing low impact to confident… |
CVE-2024-42372 | Medium | 6.5 | 2024-11-12 | Due to missing authorization check in SAP NetWeaver AS Java (System Landscape Directory) an unauthorized user can read and modify some restricted global SLD co… |
CVE-2024-10589 | Critical | 9.8 | 2024-11-09 | The Leopard - WordPress Offload Media plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a mi… |
CVE-2024-10674 | High | 8.8 | 2024-11-09 | The Th Shop Mania theme for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the th_shop_mania_instal… |
CVE-2024-10673 | High | 8.8 | 2024-11-09 | The Top Store theme for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the top_store_install_and_ac… |
CVE-2024-10588 | Medium | 4.3 | 2024-11-09 | The Debug Tool plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the info() function in all versions up to… |
CVE-2024-10586 | Critical | 9.8 | 2024-11-09 | The Debug Tool plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the dbt_pull_image() function and missing fil… |
CVE-2024-10294 | Medium | 6.5 | 2024-11-09 | The CE21 Suite plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ce21_single_sign_on_save_api_s… |
CVE-2024-48073 | Critical | 9.8 | 2024-11-08 | sunniwell HT3300 before 1.0.0.B022.2 is vulnerable to Insecure Permissions. The /usr/local/bin/update program, which is responsible for updating the software i… |
CVE-2024-10824 | Medium | 6.5 | 2024-11-07 | An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed unauthorized internal users to access sensitive secret scanning a… |
CVE-2024-43431 | High | 7.5 | 2024-11-07 | A vulnerability was found in Moodle. Insufficient capability checks made it possible to delete badges that a user does not have permission to access. |
CVE-2024-6626 | Medium | 5.3 | 2024-11-06 | The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capabi… |
CVE-2024-10543 | Medium | 4.3 | 2024-11-06 | The Tumult Hype Animations plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the hypeanimations_getcontent… |
CVE-2024-10535 | Medium | 5.3 | 2024-11-06 | The Video Gallery for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the remove_unuse… |
CVE-2024-7429 | Medium | 4.3 | 2024-11-05 | The Zotpress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Zotpress_process_accounts_AJAX fu… |
CVE-2024-51516 | Medium | 6.2 | 2024-11-05 | Permission control vulnerability in the ability module Impact: Successful exploitation of this vulnerability may cause features to function abnormally. |
CVE-2024-48045 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addons allows Exploiting Incorrectly Configured Access Control S… |
CVE-2024-48044 | Medium | 5.4 | 2024-11-01 | Missing Authorization vulnerability in ShortPixel ShortPixel Image Optimizer shortpixel-image-optimiser allows Exploiting Incorrectly Configured Access Control… |
CVE-2024-48039 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2024-47362 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials.This issue affects Strong Testimonials: from n/a through <= 3.1.16. |
CVE-2024-47361 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in WPVibes Elementor Addon Elements addon-elements-for-elementor-page-builder.This issue affects Elementor Addon Elements… |
CVE-2024-47358 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Daniel Iser Popup Maker popup-maker.This issue affects Popup Maker: from n/a through <= 1.19.2. |
CVE-2024-47321 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in Fahad Mahmood WP Datepicker wp-datepicker.This issue affects WP Datepicker: from n/a through <= 2.1.1. |
CVE-2024-47318 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Magazine3 PWA for WP & AMP pwa-for-wp.This issue affects PWA for WP & AMP: from n/a through <= 1.7.72. |
CVE-2024-47317 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Ads by WPQuads Ads by WPQuads quick-adsense-reloaded.This issue affects Ads by WPQuads: from n/a through <= 2.0.84. |
CVE-2024-47314 | High | 7.1 | 2024-11-01 | Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Securi… |
CVE-2024-47311 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Kraft Plugins Wheel of Life wheel-of-life allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2024-47308 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in WPDeveloper Templately templately.This issue affects Templately: from n/a through <= 3.1.2. |
CVE-2024-47302 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2024-44052 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in HelloAsso HelloAsso helloasso.This issue affects HelloAsso: from n/a through <= 1.1.10. |
CVE-2024-44038 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Securi… |
CVE-2024-44031 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in beardev JoomSport joomsport-sports-league-results-management.This issue affects JoomSport: from n/a through <= 5.6.3. |
CVE-2024-44021 | Medium | 5.4 | 2024-11-01 | Missing Authorization vulnerability in truepushplugin Truepush truepush-free-web-push-notifications.This issue affects Truepush: from n/a through <= 1.0.8. |
CVE-2024-44020 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in prasadkirpekar WP Free SSL – Free SSL Certificate for WordPress and force HTTPS wp-free-ssl.This issue affects WP Free S… |
CVE-2024-44019 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Renzo Johnson Contact Form 7 Campaign Monitor Extension contact-form-7-campaign-monitor-extension.This issue affects Con… |
CVE-2024-44006 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Amir Helzer WooCommerce Multilingual & Multicurrency woocommerce-multilingual.This issue affects WooCommerce Multilingua… |
CVE-2024-43998 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in WebsiteinWP Blogpoet allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Blogpoet: from n… |
CVE-2024-43982 | High | 8.8 | 2024-11-01 | Missing Authorization vulnerability in Geek Code Lab Login As Users allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2024-43981 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in AyeCode – WP Business Directory Plugins GeoDirectory allows Exploiting Incorrectly Configured Access Control Security Le… |
CVE-2024-43980 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in CozyThemes Fota WP allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fota WP: f… |
CVE-2024-43979 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in CozyThemes Blockbooster allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Blockbooster… |
CVE-2024-43974 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in CozyThemes ReviveNews allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects ReviveNews: fro… |
CVE-2024-43973 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Stiofan GetPaid invoicing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Get… |
CVE-2024-43968 | Medium | 4.3 | 2024-11-01 | Broken Access Control vulnerability in Automattic Newspack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Newspack… |
CVE-2024-43962 | Medium | 5.4 | 2024-11-01 | Missing Authorization vulnerability in LWS LWS Affiliation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LWS Affil… |
CVE-2024-43956 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in Caseproof, LLC Memberpress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Memberpres… |
CVE-2024-43937 | Medium | 6.4 | 2024-11-01 | Missing Authorization vulnerability in Themeum WP Crowdfunding allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cr… |
CVE-2024-43932 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite the-plus-addons-for-elementor-page-builder.This issue affects T… |
CVE-2024-43929 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in eyecix JobSearch allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JobSearch: from n/a… |
CVE-2024-43928 | Medium | 5.4 | 2024-11-01 | Missing Authorization vulnerability in eyecix JobSearch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobSearch: f… |
CVE-2024-43925 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Envira Gallery Team Envira Photo Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2024-43923 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Arraytics Timetics allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Timetics: from n/a… |
CVE-2024-43919 | Medium | 5.3 | 2024-11-01 | Access Control vulnerability in YARPP YARPP allows . This issue affects YARPP: from n/a through 5.30.10. |
CVE-2024-43355 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in BearDev JoomSport allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JoomSport… |
CVE-2024-43343 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Etoile Web Design Order Tracking allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Orde… |
CVE-2024-43341 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in CozyThemes Hello Agency allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Hello Agency… |
CVE-2024-43332 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Jordy Meow Photo Engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo… |
CVE-2024-43323 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in ReviewX ReviewX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReviewX: from… |
CVE-2024-43314 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster allows Exploiting Incorrectly Configured Access Control Security Levels.Thi… |
CVE-2024-43312 | Medium | 5.4 | 2024-11-01 | Missing Authorization vulnerability in WPClever WPC Frequently Bought Together for WooCommerce allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2024-43310 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in UkrSolution Print Barcode Labels for your WooCommerce allows Exploiting Incorrectly Configured Access Control Security L… |
CVE-2024-43302 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Fonts Plugin Fonts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fonts: fro… |
CVE-2024-43298 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a… |
CVE-2024-43297 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a… |
CVE-2024-43296 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in bPlugins LLC Flash & HTML5 Video allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2024-43293 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor allows Exploiting Incorrectly Configured Access Control Security Lev… |
CVE-2024-43290 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration.This issue affects Atarim: from n/a through <= 4.0.1. |
CVE-2024-43285 | Medium | 6.3 | 2024-11-01 | Missing Authorization vulnerability in Presto Made, Inc Presto Player allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2024-43277 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in AyeCode Ltd UsersWP allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UsersWP… |
CVE-2024-43274 | Medium | 5.8 | 2024-11-01 | Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Accessing Functionality Not Properly Constrained by A… |
CVE-2024-43273 | Medium | 5.4 | 2024-11-01 | Missing Authorization vulnerability in icegram Icegram Collect plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2024-43270 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in WPBackItUp Backup and Restore WordPress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affec… |
CVE-2024-43268 | Medium | 5.4 | 2024-11-01 | Access Control vulnerability in WPBackItUp Backup and Restore WordPress allows . This issue affects Backup and Restore WordPress: from n/a through 1.50. |
CVE-2024-43260 | Medium | 5.4 | 2024-11-01 | Missing Authorization vulnerability in Creative Motion Clearfy Cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2024-43254 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders.This issue affects Smart Online Order for Clover: from n/a th… |
CVE-2024-43253 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders.This issue affects Smart Online Order for Clover: from n/a th… |
CVE-2024-43235 | High | 7.1 | 2024-11-01 | Missing Authorization vulnerability in MetaBox.Io Meta Box – WordPress Custom Fields Framework allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2024-43229 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Cornel Raiu WP Search Analytics search-analytics.This issue affects WP Search Analytics: from n/a through <= 1.4.9. |
CVE-2024-43223 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in EventPrime Events EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2024-43219 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in ووکامرس فارسی Persian WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Per… |
CVE-2024-43215 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in creativemotion Social Slider Feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2024-43212 | High | 7.5 | 2024-11-01 | Missing Authorization vulnerability in MagePeople Team WpTravelly allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WpTravelly… |
CVE-2024-43209 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in Bitly allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bitly: from n/a through 2.7.2. |
CVE-2024-43208 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Matt Miller Send Emails with Mandrill send-emails-with-mandrill allows Exploiting Incorrectly Configured Access Control… |
CVE-2024-43162 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Easy Digital Downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy D… |
CVE-2024-43159 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.6. |
CVE-2024-43158 | High | 7.5 | 2024-11-01 | Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.4. |
CVE-2024-43157 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in nCrafts FormCraft allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FormCraft… |
CVE-2024-43154 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in BracketSpace Advanced Cron Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2024-43146 | Medium | 6.3 | 2024-11-01 | Missing Authorization vulnerability in Ahmed Kaludi, Mohammed Kaludi AMP for WP allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2024-43143 | Medium | 6.4 | 2024-11-01 | Missing Authorization vulnerability in Roundup WP Registrations for the Events Calendar allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2024-43142 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Themeum Tutor LMS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS… |
CVE-2024-43136 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart.This issue affects Sunshine Photo Cart: from n/a through <= 3… |
CVE-2024-43134 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in xootix Waitlist Woocommerce ( Back in stock notifier ) allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2024-43122 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in Creative Motion Robin image optimizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2024-43120 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in XSERVER Inc. TypeSquare Webfonts allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Type… |
CVE-2024-43119 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Aruba.It Aruba HiSpeed Cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |