CWE-862 · Missing Authorization (page 62)
Page 62 of 92 — CVEs classified under CWE-862, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-40672 | Medium | 5.4 | 2024-06-12 | Missing Authorization vulnerability in Hardik Chavada Sticky Social Media Icons.This issue affects Sticky Social Media Icons: from n/a through 2.1. |
CVE-2023-40603 | Medium | 5.3 | 2024-06-12 | Missing Authorization vulnerability in Gangesh Matta Simple Org Chart.This issue affects Simple Org Chart: from n/a through 2.3.4. |
CVE-2023-40209 | Medium | 6.5 | 2024-06-12 | Missing Authorization vulnerability in Himalaya Saxena Highcompress Image Compressor.This issue affects Highcompress Image Compressor: from n/a through 6.0.0. |
CVE-2023-38395 | Medium | 5.4 | 2024-06-12 | Missing Authorization vulnerability in Afzal Multani WP Clone Menu.This issue affects WP Clone Menu: from n/a through 1.0.1. |
CVE-2023-25030 | Medium | 4.3 | 2024-06-12 | Missing Authorization vulnerability in Buy Me a Coffee.This issue affects Buy Me a Coffee: from n/a through 3.7. |
CVE-2024-5468 | Medium | 6.5 | 2024-06-12 | The WordPress Header Builder Plugin – Pearl plugin for WordPress is vulnerable to unauthorized site option deletion due to a missing validation and capability… |
CVE-2023-52177 | Medium | 5.4 | 2024-06-12 | Missing Authorization vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.3. |
CVE-2023-52117 | Medium | 4.3 | 2024-06-12 | Missing Authorization vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid: from n/a through 5.6.6. |
CVE-2023-51680 | Medium | 4.3 | 2024-06-12 | Missing Authorization vulnerability in TechnoVama Quotes for WooCommerce.This issue affects Quotes for WooCommerce: from n/a through 2.0.1. |
CVE-2023-51679 | Medium | 5.4 | 2024-06-12 | Missing Authorization vulnerability in BulkGate BulkGate SMS Plugin for WooCommerce.This issue affects BulkGate SMS Plugin for WooCommerce: from n/a through 3… |
CVE-2023-51671 | Medium | 5.4 | 2024-06-12 | Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3. |
CVE-2023-51670 | Medium | 4.3 | 2024-06-12 | Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3. |
CVE-2023-51537 | Medium | 5.3 | 2024-06-12 | Missing Authorization vulnerability in Awesome Support Team Awesome Support.This issue affects Awesome Support: from n/a through 6.1.5. |
CVE-2023-51526 | Medium | 4.3 | 2024-06-12 | Missing Authorization vulnerability in Brett Shumaker Simple Staff List.This issue affects Simple Staff List: from n/a through 2.2.4. |
CVE-2024-33606 | High | 8.8 | 2024-06-11 | An attacker could retrieve sensitive files (medical images) as well as plant new medical images or overwrite existing medical images on a MicroDicom DICOM View… |
CVE-2024-34815 | Medium | 5.4 | 2024-06-11 | Missing Authorization vulnerability in Javier Carazo Import and export users and customers import-users-from-csv-with-meta.This issue affects Import and export… |
CVE-2024-34804 | Medium | 5.4 | 2024-06-11 | Missing Authorization vulnerability in Tagembed.This issue affects Tagembed: from n/a through 5.8. |
CVE-2024-34799 | Medium | 6.5 | 2024-06-11 | Missing Authorization vulnerability in Repute Infosystems BookingPress.This issue affects BookingPress: from n/a through 1.0.82. |
CVE-2024-34768 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in Fastly.This issue affects Fastly: from n/a through 1.2.25. |
CVE-2024-34763 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in Saleswonder Team: Tobias Builder for WooCommerce reviews shortcodes – ReviewShort woo-product-reviews-shortcode.This iss… |
CVE-2024-34758 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in Wpmet WP Fundraising Donation and Crowdfunding Platform.This issue affects WP Fundraising Donation and Crowdfunding Plat… |
CVE-2024-32146 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in Aspose.Cloud Marketplace Aspose.Words Exporter.This issue affects Aspose.Words Exporter: from n/a through 6.3.1. |
CVE-2024-32143 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlove Podcast Publisher: from n/a through 4.1.0. |
CVE-2024-23518 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in Navneil Naicker ACF Photo Gallery Field.This issue affects ACF Photo Gallery Field: from n/a through 2.6. |
CVE-2023-52227 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in MailerLite MailerLite – WooCommerce integration.This issue affects MailerLite – WooCommerce integration: from n/a throug… |
CVE-2023-52224 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in Revolut Revolut Gateway for WooCommerce.This issue affects Revolut Gateway for WooCommerce: from n/a through 4.9.7. |
CVE-2023-48273 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Preloader for Website.This issue affects Preloader for Website: from n/a through 1.2… |
CVE-2024-34822 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in weDevs weMail.This issue affects weMail: from n/a through 1.14.2. |
CVE-2024-34821 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in Anssi Laitila Contact List contact-list.This issue affects Contact List: from n/a through <= 2.9.87. |
CVE-2024-34819 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in Moreconvert Team MC Woocommerce Wishlist smart-wishlist-for-more-convert.This issue affects MC Woocommerce Wishlist: fro… |
CVE-2024-34753 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73. |
CVE-2024-32144 | Medium | 5.4 | 2024-06-11 | Missing Authorization vulnerability in Welcart Inc. Welcart e-Commerce.This issue affects Welcart e-Commerce: from n/a through 2.9.14. |
CVE-2024-23521 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in Happyforms.This issue affects Happyforms: from n/a through 1.25.10. |
CVE-2024-23503 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/a through 5.0.6. |
CVE-2023-52233 | High | 8.6 | 2024-06-11 | Missing Authorization vulnerability in Post SMTP Post SMTP Mailer/Email Log.This issue affects Post SMTP Mailer/Email Log: from n/a through 2.8.6. |
CVE-2023-51682 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in ibericode MC4WP.This issue affects MC4WP: from n/a through 4.9.9. |
CVE-2023-51519 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in Soliloquy Team Slider by Soliloquy.This issue affects Slider by Soliloquy: from n/a through 2.7.2. |
CVE-2024-37296 | Medium | 5.3 | 2024-06-11 | The Aimeos HTML client provides Aimeos HTML components for e-commerce projects. Starting in version 2020.04.1 and prior to versions 2020.10.27, 2021.10.21, 202… |
CVE-2024-35667 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in WP EasyCart.This issue affects WP EasyCart: from n/a through 5.5.19. |
CVE-2024-35665 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in namithjawahar Insert Post Ads.This issue affects Insert Post Ads: from n/a through 1.3.2. |
CVE-2024-35663 | Medium | 5.4 | 2024-06-11 | Missing Authorization vulnerability in HahnCreativeGroup WP Translate.This issue affects WP Translate: from n/a through 5.3.0. |
CVE-2024-35628 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web.This issue affects Photo Gallery by 10Web: from n/a through 1.8.25. |
CVE-2024-35168 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in Discourse WP Discourse.This issue affects WP Discourse: from n/a through 2.5.1. |
CVE-2024-34826 | Medium | 6.3 | 2024-06-11 | Missing Authorization vulnerability in Saleswonder Team: Tobias CF7 WOW Styler cf7-styler.This issue affects CF7 WOW Styler: from n/a through <= 1.6.4. |
CVE-2024-34820 | Medium | 6.5 | 2024-06-11 | Missing Authorization vulnerability in If So Plugin If-So Dynamic Content Personalization.This issue affects If-So Dynamic Content Personalization: from n/a th… |
CVE-2024-32148 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in Salesforce Pardot.This issue affects Pardot: from n/a through 2.1.0. |
CVE-2024-24703 | High | 8.6 | 2024-06-11 | Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.0.25. |
CVE-2023-52199 | Medium | 6.5 | 2024-06-11 | Missing Authorization vulnerability in Matthias Pfefferle & Automattic ActivityPub.This issue affects ActivityPub: from n/a through 1.0.5. |
CVE-2023-51498 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in Woo WooCommerce Canada Post Shipping.This issue affects WooCommerce Canada Post Shipping: from n/a through 2.8.3. |
CVE-2024-35683 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in Teplitsa of social technologies Leyka.This issue affects Leyka: from n/a through 3.31.1. |
CVE-2024-35671 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in Minoji MJ Update History.This issue affects MJ Update History: from n/a through 1.0.4. |
CVE-2024-34442 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in weDevs weDocs.This issue affects weDocs: from n/a through 2.1.4. |
CVE-2023-52183 | Medium | 5.4 | 2024-06-11 | Missing Authorization vulnerability in WebToffee WordPress Backup & Migration.This issue affects WordPress Backup & Migration: from n/a through 1.4.3. |
CVE-2024-35685 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in Anders Norén Radcliffe 2.This issue affects Radcliffe 2: from n/a through 2.0.17. |
CVE-2024-34813 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in Moreconvert Team MC Woocommerce Wishlist smart-wishlist-for-more-convert.This issue affects MC Woocommerce Wishlist: fro… |
CVE-2023-52179 | Medium | 5.4 | 2024-06-11 | Missing Authorization vulnerability in WebCodingPlace Product Expiry for WooCommerce.This issue affects Product Expiry for WooCommerce: from n/a through 2.5. |
CVE-2024-35716 | Medium | 6.5 | 2024-06-11 | Missing Authorization vulnerability in Copymatic Copymatic – AI Content Writer & Generator.This issue affects Copymatic – AI Content Writer & Generator: from n… |
CVE-2024-35692 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in Termly Cookie Consent.This issue affects Cookie Consent: from n/a through 3.2. |
CVE-2024-34824 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in ThemeBoy SportsPress – Sports Club & League Manager.This issue affects SportsPress – Sports Club & League Manager: from… |
CVE-2024-24704 | Medium | 5.4 | 2024-06-11 | Missing Authorization vulnerability in AddonMaster Load More Anything.This issue affects Load More Anything: from n/a through 3.3.3. |
CVE-2023-52217 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in weDevs WooCommerce Conversion Tracking.This issue affects WooCommerce Conversion Tracking: from n/a through 2.0.11. |
CVE-2023-52186 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in Woo WooCommerce Product Vendors.This issue affects WooCommerce Product Vendors: from n/a through 2.2.2. |
CVE-2023-33922 | Medium | 4.3 | 2024-06-11 | Missing Authorization vulnerability in Elementor Elementor Website Builder.This issue affects Elementor Website Builder: from n/a through 3.13.2. |
CVE-2023-28775 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in Yoast Yoast SEO Premium.This issue affects Yoast SEO Premium: from n/a through 20.4. |
CVE-2023-25799 | High | 8.3 | 2024-06-11 | Missing Authorization vulnerability in Themeum Tutor LMS.This issue affects Tutor LMS: from n/a through 2.1.8. |
CVE-2024-4319 | Medium | 5.3 | 2024-06-11 | The Advanced Contact form 7 DB plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'vsz_cf7_export_to_ex… |
CVE-2024-37176 | Medium | 5.5 | 2024-06-11 | SAP BW/4HANA Transformation and Data Transfer Process (DTP) allows an authenticated attacker to gain higher access levels than they should have by exploiting i… |
CVE-2024-34691 | Medium | 6.5 | 2024-06-11 | Manage Incoming Payment Files (F1680) of SAP S/4HANA does not perform necessary authorization checks for an authenticated user, resulting in escalation of priv… |
CVE-2024-34690 | Medium | 5.4 | 2024-06-11 | SAP Student Life Cycle Management (SLcM) fails to conduct proper authorization checks for authenticated users, leading to the potential escalation of privilege… |
CVE-2023-6748 | Medium | 4.3 | 2024-06-11 | The Custom Field Template plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.1 via the 'cft' shortc… |
CVE-2024-34800 | High | 7.6 | 2024-06-10 | Missing Authorization vulnerability in Crafthemes Crafthemes Demo Import crafthemes-demo-import allows Exploiting Incorrectly Configured Access Control Securit… |
CVE-2024-4746 | Medium | 4.3 | 2024-06-10 | Missing Authorization vulnerability in netgsm Netgsm netgsm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Netgsm… |
CVE-2024-4745 | Medium | 4.3 | 2024-06-10 | Missing Authorization vulnerability in RafflePress Giveaways and Contests by RafflePress.This issue affects Giveaways and Contests by RafflePress: from n/a thr… |
CVE-2024-4744 | Medium | 5.3 | 2024-06-10 | Missing Authorization vulnerability in Avirtum iPages Flipbook.This issue affects iPages Flipbook: from n/a through 1.5.1. |
CVE-2024-35742 | Medium | 5.3 | 2024-06-10 | Missing Authorization vulnerability in Code Parrots Easy Forms for Mailchimp.This issue affects Easy Forms for Mailchimp: from n/a through 6.9.0. |
CVE-2024-35741 | Medium | 4.3 | 2024-06-10 | Missing Authorization vulnerability in Awesome Support Team Awesome Support.This issue affects Awesome Support: from n/a through 6.1.7. |
CVE-2024-35735 | Medium | 5.3 | 2024-06-10 | Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11. |
CVE-2024-35729 | Medium | 5.3 | 2024-06-10 | Missing Authorization vulnerability in Tickera Tickera tickera-event-ticketing-system allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2024-35727 | Medium | 4.3 | 2024-06-10 | Missing Authorization vulnerability in actpro Extra Product Options for WooCommerce.This issue affects Extra Product Options for WooCommerce: from n/a through… |
CVE-2024-35726 | Medium | 4.3 | 2024-06-10 | Missing Authorization vulnerability in ThemeKraft WooBuddy.This issue affects WooBuddy: from n/a through 3.4.19. |
CVE-2024-35725 | Medium | 4.3 | 2024-06-10 | Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1… |
CVE-2024-35724 | Medium | 4.3 | 2024-06-10 | Missing Authorization vulnerability in Bosa Themes Bosa Elementor Addons and Templates for WooCommerce.This issue affects Bosa Elementor Addons and Templates f… |
CVE-2024-35723 | Medium | 4.3 | 2024-06-10 | Missing Authorization vulnerability in Andrew Dashboard To-Do List dashboard-to-do-list.This issue affects Dashboard To-Do List: from n/a through <= 1.2.0. |
CVE-2024-35722 | Medium | 4.3 | 2024-06-10 | Missing Authorization vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow.This issue affects Slider Responsive Slideshow –… |
CVE-2024-35721 | Medium | 4.3 | 2024-06-10 | Missing Authorization vulnerability in A WP Life Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery.This issue affects Image Gallery –… |
CVE-2024-35720 | Medium | 4.3 | 2024-06-10 | Missing Authorization vulnerability in A WP Life Album Gallery – WordPress Gallery.This issue affects Album Gallery – WordPress Gallery: from n/a through 1.5.7. |
CVE-2024-35717 | Medium | 4.3 | 2024-06-10 | Missing Authorization vulnerability in A WP Life Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow.This issue affects Media Slider – P… |
CVE-2024-23524 | Medium | 5.3 | 2024-06-10 | Missing Authorization vulnerability in ONTRAPORT Inc. PilotPress.This issue affects PilotPress: from n/a through 2.0.30. |
CVE-2024-22298 | Medium | 5.3 | 2024-06-10 | Missing Authorization vulnerability in TMS Amelia ameliabooking.This issue affects Amelia: from n/a through 1.0.98. |
CVE-2024-22296 | Medium | 4.3 | 2024-06-10 | Missing Authorization vulnerability in Code for Recovery 12 Step Meeting List.This issue affects 12 Step Meeting List: from n/a through 3.14.28. |
CVE-2024-21751 | Medium | 5.4 | 2024-06-10 | Missing Authorization vulnerability in RabbitLoader.This issue affects RabbitLoader: from n/a through 2.19.13. |
CVE-2024-35748 | Medium | 5.3 | 2024-06-09 | Missing Authorization vulnerability in OPMC WooCommerce Dropshipping.This issue affects WooCommerce Dropshipping: from n/a through 5.0.4. |
CVE-2024-35662 | Medium | 5.4 | 2024-06-09 | Missing Authorization vulnerability in Andreas Sofantzis Simple COD Fees for WooCommerce.This issue affects Simple COD Fees for WooCommerce: from n/a through 2… |
CVE-2024-35661 | Medium | 5.3 | 2024-06-09 | Missing Authorization vulnerability in SoftLab Upload Fields for WPForms.This issue affects Upload Fields for WPForms: from n/a through 1.0.2. |
CVE-2024-34802 | Medium | 5.3 | 2024-06-09 | Missing Authorization vulnerability in AdFoxly AdFoxly – Ad Manager, AdSense Ads & Ads.Txt.This issue affects AdFoxly – Ad Manager, AdSense Ads & Ads.Txt: from… |
CVE-2024-32081 | Medium | 4.3 | 2024-06-09 | Missing Authorization vulnerability in Websupporter Filter Custom Fields & Taxonomies Light.This issue affects Filter Custom Fields & Taxonomies Light: from n/… |
CVE-2024-31304 | High | 7.1 | 2024-06-09 | Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.1.3. |
CVE-2024-31284 | Medium | 6.5 | 2024-06-09 | Missing Authorization vulnerability in WPDeveloper EmbedPress.This issue affects EmbedPress: from n/a through 3.9.8. |
CVE-2024-31283 | High | 7.5 | 2024-06-09 | Missing Authorization vulnerability in zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1… |
CVE-2024-31276 | Medium | 5.3 | 2024-06-09 | Missing Authorization vulnerability in WPFactory Products, Order & Customers Export for WooCommerce.This issue affects Products, Order & Customers Export for W… |