CWE-862 · Missing Authorization (page 57)
Page 57 of 92 — CVEs classified under CWE-862, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-43118 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hummingbird hummingbird-performance.This issue affects Hummingbird: from n… |
CVE-2024-39664 | High | 7.3 | 2024-11-01 | Missing Authorization vulnerability in YMC Filter & Grids allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Filter & Grids: fr… |
CVE-2024-39654 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets.This issue affects Sign-up Sheets: from n/a through <= 2.2.12. |
CVE-2024-39650 | High | 7.3 | 2024-11-01 | Missing Authorization vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects… |
CVE-2024-39640 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in QuadLayers WP Social Feed Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2024-39635 | Medium | 5.4 | 2024-11-01 | Missing Authorization vulnerability in KaineLabs Youzify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Youzify: fr… |
CVE-2024-39625 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in icegram Icegram allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Icegram: from n/a thr… |
CVE-2024-38794 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in MediaRon LLC Custom Query Blocks allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Cust… |
CVE-2024-38792 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in ConveyThis Translate Team Language Translate Widget for WordPress – ConveyThis allows Accessing Functionality Not Proper… |
CVE-2024-38783 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Tyche Softwares Arconix FAQ allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Arconix F… |
CVE-2024-38777 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in CreativeMotion Titan Anti-spam & Security allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2024-38774 | Medium | 5.4 | 2024-11-01 | Missing Authorization vulnerability in SiteGround SiteGround Security allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2024-38771 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration.This issue affects Atarim: from n/a through <= 4.0. |
CVE-2024-38769 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Tyche Softwares Arconix Shortcodes allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Ar… |
CVE-2024-38748 | Medium | 5.3 | 2024-11-01 | Access Control vulnerability in TheInnovs EleForms allows . This issue affects EleForms: from n/a through 2.9.9.9. |
CVE-2024-38745 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Rymera Web Co Wholesale Suite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Wholesa… |
CVE-2024-38744 | High | 8.3 | 2024-11-01 | Missing Authorization vulnerability in Upqode Plum: Spin Wheel & Email Pop-up allows Accessing Functionality Not Properly Constrained by ACLs, Stored XSS.This… |
CVE-2024-38743 | Medium | 5.3 | 2024-11-01 | Access Control vulnerability in Upqode Plum: Spin Wheel & Email Pop-up allows . This issue affects Plum: Spin Wheel & Email Pop-up: from n/a through 2.0. |
CVE-2024-38740 | Medium | 5.4 | 2024-11-01 | Missing Authorization vulnerability in Packlink Shipping S.L. Packlink PRO shipping module allows Exploiting Incorrectly Configured Access Control Security Lev… |
CVE-2024-38737 | Medium | 5.4 | 2024-11-01 | Missing Authorization vulnerability in Reservation Diary ReDi Restaurant Reservation allows Accessing Functionality Not Properly Constrained by ACLs.This issue… |
CVE-2024-38733 | Medium | 5.4 | 2024-11-01 | Missing Authorization vulnerability in Meks Meks Video Importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Meks… |
CVE-2024-38727 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source allows Exploiting Incorrectly Configured Access Control Security Lev… |
CVE-2024-38726 | High | 7.5 | 2024-11-01 | Missing Authorization vulnerability in PickPlugins Product Designer allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Product… |
CVE-2024-38721 | High | 7.1 | 2024-11-01 | Missing Authorization vulnerability in spider-themes EazyDocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EazyDo… |
CVE-2024-38719 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Creative Motion Auto Featured Image (Auto Post Thumbnail) allows Exploiting Incorrectly Configured Access Control Securi… |
CVE-2024-38714 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Epsiloncool WP Fast Total Search fulltext-search.This issue affects WP Fast Total Search: from n/a through <= 1.68.232. |
CVE-2024-38707 | Medium | 6.3 | 2024-11-01 | Missing Authorization vulnerability in WPDeveloper EmbedPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EmbedP… |
CVE-2024-38702 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Tyche Softwares Product Delivery Date for WooCommerce – Lite allows Accessing Functionality Not Properly Constrained by… |
CVE-2024-38695 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Martin Gibson WP GoToWebinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2024-38690 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Avirtum iPanorama 360 WordPress Virtual Tour Builder allows Accessing Functionality Not Properly Constrained by ACLs.Thi… |
CVE-2024-37929 | Medium | 6.3 | 2024-11-01 | Missing Authorization vulnerability in solwin User Activity Log Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2024-37926 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Alex Volkov WP Accessibility Helper (WAH) allows Accessing Functionality Not Properly Constrained by ACLs.This issue aff… |
CVE-2024-37921 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Kiboko Labs Chained Quiz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chai… |
CVE-2024-37517 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spec… |
CVE-2024-37516 | Medium | 6.3 | 2024-11-01 | Missing Authorization vulnerability in fifu.App Featured Image from URL allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2024-37510 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in Charitable Donations & Fundraising Team Charitable allows Accessing Functionality Not Properly Constrained by ACLs.This… |
CVE-2024-37506 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Charitable Donations & Fundraising Team Charitable allows Accessing Functionality Not Properly Constrained by ACLs.This… |
CVE-2024-37505 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Rara Themes Business One Page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2024-37483 | Medium | 5.4 | 2024-11-01 | Missing Authorization vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through <= 7.7.4. |
CVE-2024-37482 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through <= 7.7.4. |
CVE-2024-37481 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in RadiusTheme The Post Grid the-post-grid.This issue affects The Post Grid: from n/a through <= 7.7.4. |
CVE-2024-37477 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in Automattic Newspack Content Converter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2024-37475 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Automattic Newspack Newsletters allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Newsp… |
CVE-2024-37470 | High | 8.2 | 2024-11-01 | Missing Authorization vulnerability in WofficeIO Woffice Core allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Woffice Core… |
CVE-2024-37468 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in blazethemes Newsmatic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Newsmat… |
CVE-2024-37463 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in CRM Perks CRM Perks Forms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects CRM Perks F… |
CVE-2024-37456 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Noptin Newsletter Noptin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Noptin: from… |
CVE-2024-37453 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in ProfileGrid User Profiles ProfileGrid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2024-37444 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Defender Security defender-security.This issue affects Defender Security… |
CVE-2024-37443 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Automattic WP Job Manager - Resume Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2024-37440 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.4.4. |
CVE-2024-37439 | Medium | 5.4 | 2024-11-01 | Missing Authorization vulnerability in Uncanny Owl Uncanny Toolkit Pro for LearnDash allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2024-37427 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Arraytics Timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Timetics… |
CVE-2024-37425 | Medium | 5.4 | 2024-11-01 | Missing Authorization vulnerability in Automattic Newspack Blocks newspack-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2024-37415 | Medium | 5.4 | 2024-11-01 | Missing Authorization vulnerability in E2Pdf e2pdf e2pdf.This issue affects e2pdf: from n/a through <= 1.20.27. |
CVE-2024-37411 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Progress Planner Progress Planner progress-planner.This issue affects Progress Planner: from n/a through <= 0.9.1. |
CVE-2024-37276 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in fifu.App Featured Image from URL allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2024-37269 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets allows Exploiting Incorrectly Configured Access Control Security Levels.Thi… |
CVE-2024-37255 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Roxnor ElementsKit Elementor addons Lite elementskit-lite.This issue affects ElementsKit Elementor addons Lite: from n/a… |
CVE-2024-37254 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in mndpsingh287 File Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fil… |
CVE-2024-37250 | Medium | 5.4 | 2024-11-01 | Missing Authorization vulnerability in WPEngine Inc. Advanced Custom Fields PRO allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2024-37249 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in WPEngine Inc. Advanced Custom Fields PRO allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2024-37232 | High | 8.8 | 2024-11-01 | Missing Authorization vulnerability in Hercules Design Hercules Core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2024-37226 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Kanban for WordPress Kanban Boards for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2024-37220 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in OptinlyHQ Optinly allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optinly: fr… |
CVE-2024-37218 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in WordPress Page Builder Sandwich Team Page Builder Sandwich – Front-End Page Builder allows Exploiting Incorrectly Config… |
CVE-2024-37214 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in Dropshipping Guru Ali2Woo Lite Exploiting Incorrectly Configured Access Control Security Levels, Stored XSS.This issue a… |
CVE-2024-37209 | Medium | 6.5 | 2024-11-01 | Access Control vulnerability in Prism IT Systems User Rights Access Manager allows . This issue affects User Rights Access Manager: from n/a through 1.1.2. |
CVE-2024-37207 | Medium | 5.4 | 2024-11-01 | Missing Authorization vulnerability in Theme4Press Demo Awesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Demo… |
CVE-2024-37204 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in PropertyHive PropertyHive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pro… |
CVE-2024-37203 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Laybuy Laybuy Payment Extension for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2024-37201 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in javmah Woocommerce Customers Order History allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2024-37123 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in VowelWeb Ibtana allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ibtana: from… |
CVE-2024-37119 | Medium | 5.3 | 2024-11-01 | Missing Authorization vulnerability in Uncanny Owl Uncanny Automator Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2024-37106 | High | 8.2 | 2024-11-01 | Missing Authorization vulnerability in WishList Products WishList Member X allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2024-37096 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Popup Box Team Popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup bo… |
CVE-2024-37095 | Medium | 4.3 | 2024-11-01 | Missing Authorization vulnerability in Envira Gallery Team Envira Photo Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2024-37094 | High | 8.2 | 2024-11-01 | Missing Authorization vulnerability in StylemixThemes MasterStudy LMS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affe… |
CVE-2024-10598 | Medium | 5.3 | 2024-10-31 | A vulnerability classified as critical was found in Tongda OA 11.2/11.3/11.4/11.5/11.6. This vulnerability affects unknown code of the file general/hr/setting/… |
CVE-2024-10399 | Medium | 4.3 | 2024-10-30 | The Download Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_search_users functio… |
CVE-2024-50454 | Medium | 5.3 | 2024-10-29 | Missing Authorization vulnerability in Benjamin Denis SEOPress wp-seopress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2024-50428 | Medium | 4.3 | 2024-10-29 | Missing Authorization vulnerability in mondula2016 Multi Step Form multi-step-form allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2024-50424 | Medium | 6.5 | 2024-10-29 | Missing Authorization vulnerability in WPDeveloper Templately templately allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2024-50423 | Medium | 5.4 | 2024-10-29 | Missing Authorization vulnerability in WPDeveloper Templately templately allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2024-50422 | Medium | 5.3 | 2024-10-29 | Missing Authorization vulnerability in Cloudways Breeze breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breez… |
CVE-2024-50421 | Medium | 5.3 | 2024-10-29 | Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips woocommerce-pdf-invoices-packing-slips allows Exploiting Incorrect… |
CVE-2024-50456 | Medium | 5.4 | 2024-10-29 | Missing Authorization vulnerability in Benjamin Denis SEOPress wp-seopress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2024-50455 | Medium | 4.3 | 2024-10-29 | Missing Authorization vulnerability in Benjamin Denis SEOPress wp-seopress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2024-50459 | Medium | 5.3 | 2024-10-29 | Missing Authorization vulnerability in Hossni Mubarak AidWP wp-stripe-donation allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2024-7475 | Critical | 9.1 | 2024-10-29 | An improper access control vulnerability in lunary-ai/lunary version 1.3.2 allows an attacker to update the SAML configuration without authorization. This vuln… |
CVE-2024-10437 | Medium | 4.3 | 2024-10-29 | The WPC Smart Messages for WooCommerce plugin for WordPress is vulnerable to unauthorized Smar Message activation/deactivation due to a missing capability chec… |
CVE-2024-50490 | Critical | 9.8 | 2024-10-29 | Missing Authorization vulnerability in lowcage PegaPoll pegapoll allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects PegaPoll: f… |
CVE-2024-50476 | Critical | 9.8 | 2024-10-29 | Missing Authorization vulnerability in GRÜN Software Group GmbH GRÜN spendino Spendenformular spendino allows Privilege Escalation.This issue affects GRÜN spen… |
CVE-2024-50475 | Critical | 9.8 | 2024-10-29 | Missing Authorization vulnerability in Scott Gamon Signup Page signup-page allows Privilege Escalation.This issue affects Signup Page: from n/a through <= 1.0. |
CVE-2024-50052 | Medium | 4.3 | 2024-10-29 | Mattermost versions 9.10.x <= 9.10.2, 9.11.x <= 9.11.1, 9.5.x <= 9.5.9 fail to check that the origin of the message in an integration action matches with the o… |
CVE-2024-10008 | High | 8.8 | 2024-10-29 | The Masteriyo LMS – eLearning and Online Course Builder for WordPress plugin for WordPress is vulnerable to unauthorized user profile modification due to missi… |
CVE-2024-44265 | Low | 2.4 | 2024-10-28 | The issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1… |
CVE-2024-44208 | High | 7.5 | 2024-10-28 | This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15. An app may be able to bypass certain Privacy preferences. |
CVE-2024-44156 | High | 7.1 | 2024-10-28 | A path deletion vulnerability was addressed by preventing vulnerable code from running with privileges. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma… |
CVE-2024-9629 | Medium | 5.4 | 2024-10-28 | The Contact Form 7 + Telegram plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the… |