CWE-862 · Missing Authorization (page 61)
Page 61 of 100 — CVEs classified under CWE-862, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-22541 | Medium | 5.4 | 2025-01-07 | Missing Authorization vulnerability in etruel WP Delete Post Copies etruel-del-post-copies allows Exploiting Incorrectly Configured Access Control Security Lev… |
CVE-2025-22534 | Medium | 5.4 | 2025-01-07 | Missing Authorization vulnerability in Ella Van Durpe Slides & Presentations slide allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-22512 | Medium | 4.3 | 2025-01-07 | Missing Authorization vulnerability in BoldGrid Help Scout help-scout allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2024-12711 | Medium | 5.3 | 2025-01-07 | The RSVP and Event Management plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX functions like bulk_d… |
CVE-2024-12316 | Medium | 5.3 | 2025-01-07 | The Jupiter X Core plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_popup_action() function in… |
CVE-2024-12033 | Medium | 4.3 | 2025-01-07 | The Jupiter X Core plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the sync_libraries() function in all versions… |
CVE-2025-22304 | Medium | 4.3 | 2025-01-07 | Missing Authorization vulnerability in osama.esh WP Visitor Statistics (Real Time Traffic) wp-stats-manager allows Exploiting Incorrectly Configured Access Con… |
CVE-2025-22302 | Medium | 5.3 | 2025-01-07 | Missing Authorization vulnerability in WP Grids WP Wand ai-content-generation allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2025-22299 | Medium | 4.3 | 2025-01-07 | Missing Authorization vulnerability in Space Codes AI for SEO ai-for-seo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2025-22298 | Medium | 4.3 | 2025-01-07 | Missing Authorization vulnerability in Hive Support Hive Support hive-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… |
CVE-2024-56294 | Medium | 6.4 | 2025-01-07 | Missing Authorization vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2024-56276 | Medium | 4.3 | 2025-01-07 | Missing Authorization vulnerability in Syed Balkhi Contact Form by WPForms wpforms-lite allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2024-56273 | Medium | 4.3 | 2025-01-07 | Missing Authorization vulnerability in wpvividplugins WPvivid Backup and Migration wpvivid-backuprestore allows Accessing Functionality Not Properly Constraine… |
CVE-2024-56271 | Medium | 4.3 | 2025-01-07 | Missing Authorization vulnerability in SecureSubmit WP SecureSubmit securesubmit allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2024-51651 | Medium | 5.3 | 2025-01-07 | Missing Authorization vulnerability in Imran Tauqeer CubeWP Forms cubewp-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2024-12719 | Medium | 4.3 | 2025-01-07 | The WordPress File Upload plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'wfu_ajax_action_read_subf… |
CVE-2024-12202 | High | 8.8 | 2025-01-07 | The Croma Music plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check… |
CVE-2024-10866 | Medium | 5.3 | 2025-01-07 | The Export Import Menus plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the dsp_export_import_menus() fu… |
CVE-2024-12781 | Medium | 4.3 | 2025-01-07 | The Aurum - WordPress & WooCommerce Shopping Theme theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on… |
CVE-2024-11725 | High | 8.8 | 2025-01-07 | The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation d… |
CVE-2024-9697 | Medium | 5.3 | 2025-01-07 | The Social Rocket – Social Sharing Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the twee… |
CVE-2024-12535 | High | 8.6 | 2025-01-07 | The Host PHP Info plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the 'phpinfo' function in… |
CVE-2024-10536 | Medium | 4.3 | 2025-01-07 | The FancyPost – Best Ultimate Post Block, Post Grid, Layouts, Carousel, Slider For Gutenberg & Elementor plugin for WordPress is vulnerable to unauthorized acc… |
CVE-2024-12327 | Medium | 4.3 | 2025-01-07 | The LazyLoad Background Images plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pblzbg_save_set… |
CVE-2024-12176 | Medium | 5.3 | 2025-01-07 | The WordLift – AI powered SEO – Schema plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'wl_config_plugin' AJ… |
CVE-2024-12158 | Medium | 5.3 | 2025-01-07 | The Popup – MailChimp, GetResponse and ActiveCampaign Intergrations plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability… |
CVE-2024-11496 | Medium | 6.5 | 2025-01-07 | The Infility Global plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the infility_global_ajax funct… |
CVE-2024-10527 | Low | 3.1 | 2025-01-07 | The Spacer plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the motech_spacer_callback() function in all… |
CVE-2024-12559 | Medium | 5.3 | 2025-01-07 | The ClickDesigns plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'clickdesigns_add_api' and th… |
CVE-2024-55408 | Medium | 5.3 | 2025-01-06 | An improper access control vulnerability in the AsusSAIO.sys driver may lead to the misuse of software functionality utilizing the driver when crafted IOCTL re… |
CVE-2025-22385 | Medium | 5.9 | 2025-01-04 | An issue was discovered in Optimizely Configured Commerce before 5.2.2408. For newly created accounts, the Commerce B2B application does not require email conf… |
CVE-2023-23672 | Medium | 5.4 | 2025-01-02 | Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP.This issue affects GiveWP: from n/a through 2.25.1. |
CVE-2022-47601 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in JoomUnited WP Table Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects W… |
CVE-2022-45811 | Medium | 5.4 | 2025-01-02 | Missing Authorization vulnerability in WeyHan Ng Post Teaser.This issue affects Post Teaser: from n/a through 4.1.5. |
CVE-2023-48758 | High | 7.1 | 2025-01-02 | Missing Authorization vulnerability in Crocoblock JetEngine jet-engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2023-48739 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in Porto Theme Porto Theme - Functionality porto-functionality allows Exploiting Incorrectly Configured Access Control Secu… |
CVE-2023-47807 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in 10Web 10WebAnalytics wd-google-analytics allows Exploiting Incorrectly Configured Access Control Security Levels.This is… |
CVE-2023-47778 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in LuckyWP LuckyWP Scripts Control luckywp-scripts-control allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2023-45633 | Medium | 6.5 | 2025-01-02 | Missing Authorization vulnerability in IDX IMPress Listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IMPress… |
CVE-2023-45272 | Medium | 5.4 | 2025-01-02 | Missing Authorization vulnerability in 10Web 10Web Map Builder for Google Maps allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2023-40327 | Medium | 6.5 | 2025-01-02 | Missing Authorization vulnerability in Putler / Storeapps Putler Connector for WooCommerce.This issue affects Putler Connector for WooCommerce: from n/a throug… |
CVE-2023-39994 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in Repute InfoSystems ARMember Premium allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2023-32240 | Medium | 5.4 | 2025-01-02 | Missing Authorization vulnerability in Xtemos WoodMart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WoodMart: fro… |
CVE-2022-45830 | Medium | 6.5 | 2025-01-02 | Missing Authorization vulnerability in Analytify.This issue affects Analytify: from n/a through 4.2.3. |
CVE-2022-43476 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in Daniel Söderström / Sidney van de Stouwe Subscribe to Category allows Exploiting Incorrectly Configured Access Control S… |
CVE-2022-41995 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in Galleryape Gallery Images Ape allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2024-56266 | Medium | 6.3 | 2025-01-02 | Missing Authorization vulnerability in sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar mp3-music-player-by-sonaar allows Accessing Functionality N… |
CVE-2024-56255 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in Stiofan AyeCode Connect ayecode-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2024-56253 | Medium | 5.4 | 2025-01-02 | Missing Authorization vulnerability in supsystic Data Tables Generator by Supsystic data-tables-generator-by-supsystic allows Exploiting Incorrectly Configured… |
CVE-2024-56244 | Medium | 5.4 | 2025-01-02 | Missing Authorization vulnerability in WP Royal Ashe Extra ashe-extra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2024-56243 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in JS Morisset WPSSO Core wpsso allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2024-56238 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in QuantumCloud Floating Action Buttons floating-action-buttons allows Accessing Functionality Not Properly Constrained by… |
CVE-2024-56236 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in Juni Hestia Nginx Cache hestia-nginx-cache allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2023-47693 | High | 7.5 | 2025-01-02 | Missing Authorization vulnerability in Themefic Ultimate Addons for Contact Form 7 ultimate-addons-for-contact-form-7 allows Exploiting Incorrectly Configured… |
CVE-2023-47692 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in flothemesplugins Flo Forms flo-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2023-47689 | Medium | 6.5 | 2025-01-02 | Missing Authorization vulnerability in Toast Plugins Animator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Animat… |
CVE-2023-47661 | Medium | 5.4 | 2025-01-02 | Missing Authorization vulnerability in Dragfy Dragfy Addons for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2023-47648 | High | 7.5 | 2025-01-02 | Missing Authorization vulnerability in Spider Themes EazyDocs eazydocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2023-47647 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in LearningTimes BadgeOS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BadgeOS… |
CVE-2023-47557 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in wp-buy Visitors Traffic Real Time Statistics visitors-traffic-real-time-statistics allows Exploiting Incorrectly Configu… |
CVE-2023-47523 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in Ecreate Infotech Auto Tag Creator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2023-47515 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in Seers Seers allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seers: from n/a t… |
CVE-2023-47241 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in CoCart Headless CoCart – Headless ecommerce cart-rest-api-for-woocommerce allows Exploiting Incorrectly Configured Acces… |
CVE-2023-47225 | Medium | 5.4 | 2025-01-02 | Missing Authorization vulnerability in KaizenCoders Short URL shorten-url allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2023-47224 | High | 7.5 | 2025-01-02 | Missing Authorization vulnerability in WP Travel WP Travel wp-travel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-47188 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in PressTigers Simple Job Board simple-job-board allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2023-47187 | Medium | 5.4 | 2025-01-02 | Missing Authorization vulnerability in Labib Ahmed Animated Rotating Words css3-rotating-words allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2023-47183 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GiveWP… |
CVE-2023-47180 | Medium | 6.5 | 2025-01-02 | Missing Authorization vulnerability in XLPlugins Finale Lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Finale… |
CVE-2023-47179 | High | 8.8 | 2025-01-02 | Missing Authorization vulnerability in mdalabar WooODT Lite byconsole-woo-order-delivery-time allows Exploiting Incorrectly Configured Access Control Security… |
CVE-2023-46644 | Medium | 6.5 | 2025-01-02 | Missing Authorization vulnerability in WP CTA PRO WordPress CTA allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Word… |
CVE-2023-46639 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in FeedbackWP kk Star Ratings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects kk… |
CVE-2023-46637 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in Saurav Sharma Generate Dummy Posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af… |
CVE-2023-46635 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in YITHEMES YITH WooCommerce Product Add-Ons yith-woocommerce-product-add-ons allows Exploiting Incorrectly Configured Acce… |
CVE-2023-46633 | Medium | 5.4 | 2025-01-02 | Missing Authorization vulnerability in TCBarrett Glossary allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Glossary… |
CVE-2023-46632 | High | 7.1 | 2025-01-02 | Missing Authorization vulnerability in David Cramer My Shortcodes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My… |
CVE-2023-46631 | Medium | 6.5 | 2025-01-02 | Missing Authorization vulnerability in RevenueHunt Product Recommendation Quiz for eCommerce product-recommendation-quiz-for-ecommerce allows Exploiting Incorr… |
CVE-2023-46628 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in RedLettuce Plugins WP Word Count allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2023-46616 | Medium | 5.4 | 2025-01-02 | Missing Authorization vulnerability in NSquared Draw Attention allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Draw… |
CVE-2023-46612 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in codedraft Mediabay mediabay-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2023-46610 | Medium | 6.5 | 2025-01-02 | Missing Authorization vulnerability in Mohamed Magdy Quill Forms quillforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
CVE-2023-46609 | Medium | 6.5 | 2025-01-02 | Missing Authorization vulnerability in FeedFocal FeedFocal feedfocal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-46608 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in WPDO DoLogin Security dologin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-46607 | Medium | 5.4 | 2025-01-02 | Missing Authorization vulnerability in WP iCal Availability WP iCal Availability allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2023-46606 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in Team AtomChat AtomChat atomchat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec… |
CVE-2023-46605 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in Ruslan Suhar Convertful – Your Ultimate On-Site Conversion Tool allows Exploiting Incorrectly Configured Access Control… |
CVE-2023-46309 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in AdvancedCoding wpDiscuz wpdiscuz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2023-46206 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in Webの相談所 MW WP Form mw-wp-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-46203 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in JustCoded / Alex Prokopenko Just Custom Fields allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2023-46196 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in Repuso Social proof testimonials and reviews by Repuso social-testimonials-and-reviews-widget allows Exploiting Incorrec… |
CVE-2023-46195 | Medium | 6.5 | 2025-01-02 | Missing Authorization vulnerability in CoSchedule Headline Analyzer headline-analyzer allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2023-46188 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in Jose Mortellaro Freesoul Deactivate Plugins – Plugin manager and cleanup allows Exploiting Incorrectly Configured Access… |
CVE-2023-46083 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in WP Chill Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2023-46082 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in Cyberlord92 Broken Link Checker | Finder broken-link-finder allows Exploiting Incorrectly Configured Access Control Secu… |
CVE-2023-46080 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in Farhan Noor ApplyOnline – Application Form Builder and Manager allows Exploiting Incorrectly Configured Access Control S… |
CVE-2023-46079 | Medium | 5.4 | 2025-01-02 | Missing Authorization vulnerability in WP Royal Ashe Extra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ashe Extr… |
CVE-2023-46073 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in Mario Peshev DX Delete Attached Media dx-delete-attached-media allows Exploiting Incorrectly Configured Access Control S… |
CVE-2023-45828 | Medium | 5.4 | 2025-01-02 | Missing Authorization vulnerability in RumbleTalk RumbleTalk Live Group Chat rumbletalk-chat-a-chat-with-themes allows Exploiting Incorrectly Configured Access… |
CVE-2023-45766 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2023-45765 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP ERP: fro… |