CWE-862 · Missing Authorization (page 67)
Page 67 of 92 — CVEs classified under CWE-862, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-1984 | Medium | 5.3 | 2024-04-09 | The Graphene theme for WordPress is vulnerable to unauthorized access of data via meta tag in all versions up to, and including, 2.9.2. This makes it possible… |
CVE-2024-1934 | High | 7.5 | 2024-04-09 | The WP Compress – Image Optimizer plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wps_local_c… |
CVE-2024-1904 | Medium | 4.3 | 2024-04-09 | The MasterStudy LMS plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the search_posts function in all ver… |
CVE-2024-1850 | Medium | 6.3 | 2024-04-09 | The AI Post Generator | AutoWriter plugin for WordPress is vulnerable to unauthorized access, modification or deletion of posts due to a missing capability che… |
CVE-2024-1641 | Medium | 5.4 | 2024-04-09 | The Accordion plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the 'accordions_d… |
CVE-2024-1637 | Medium | 4.3 | 2024-04-09 | The 360 Javascript Viewer plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check and nonce exposure on sever… |
CVE-2024-1587 | Medium | 5.3 | 2024-04-09 | The Newsmatic theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.0 via the 'newsmatic_filter_posts_l… |
CVE-2024-1387 | Medium | 4.3 | 2024-04-09 | The Happy Addons for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to insufficient authorization on the duplicate_thing() fun… |
CVE-2024-1352 | Medium | 6.5 | 2024-04-09 | The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized access & modification of data due to a m… |
CVE-2023-6965 | Medium | 4.3 | 2024-04-09 | The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.0.10 (with the e… |
CVE-2024-31368 | Medium | 6.5 | 2024-04-09 | Missing Authorization vulnerability in PenciDesign Soledad.This issue affects Soledad: from n/a through 8.4.2. |
CVE-2024-31367 | High | 7.1 | 2024-04-09 | Missing Authorization vulnerability in PenciDesign Soledad.This issue affects Soledad: from n/a through 8.4.2. |
CVE-2024-31366 | High | 7.1 | 2024-04-09 | Missing Authorization vulnerability in Themify Post Type Builder (PTB).This issue affects Post Type Builder (PTB): from n/a through 2.0.8. |
CVE-2024-30217 | Medium | 4.3 | 2024-04-09 | Cash Management in SAP S/4 HANA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. By exploiting… |
CVE-2024-30216 | Medium | 4.3 | 2024-04-09 | Cash Management in SAP S/4 HANA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. By exploiting… |
CVE-2024-28167 | Medium | 6.5 | 2024-04-09 | SAP Group Reporting Data Collection does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On succes… |
CVE-2024-31813 | High | 8.4 | 2024-04-08 | TOTOLINK EX200 V4.0.3c.7646_B20201211 does not contain an authentication mechanism by default. |
CVE-2024-31375 | Medium | 5.4 | 2024-04-08 | Missing Authorization vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads.This issue affects WP2LEADS: from n/a through <= 3.2.7. |
CVE-2023-52541 | High | 7.5 | 2024-04-08 | Authentication vulnerability in the API for app pre-loading. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-52352 | Medium | 5.5 | 2024-04-08 | In Network Adapter Service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges ne… |
CVE-2023-52713 | High | 7.7 | 2024-04-07 | Vulnerability of improper permission control in the window management module. Impact: Successful exploitation of this vulnerability will affect availability an… |
CVE-2024-3216 | Medium | 5.3 | 2024-04-06 | The WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin for WordPress is vulnerable to unauthorized modification of data due to… |
CVE-2024-1385 | High | 7.1 | 2024-04-06 | The WP-Stateless – Google Cloud Storage plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the dismiss_notice… |
CVE-2024-1994 | Medium | 4.3 | 2024-04-06 | The Image Watermark plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the watermark_action_ajax() fu… |
CVE-2024-27911 | High | 7.5 | 2024-04-05 | A vulnerability was reported in some Lenovo Printers that could allow an unauthenticated attacker to obtain the administrator password. |
CVE-2024-27910 | Medium | 5.3 | 2024-04-05 | A vulnerability was reported in some Lenovo Printers that could allow an unauthenticated attacker to reboot the printer without authentication. |
CVE-2024-26705 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: parisc: BTLB: Fix crash when setting up BTLB at CPU bringup When using hotplug and bringi… |
CVE-2024-0394 | High | 7.8 | 2024-04-03 | Rapid7 Minerva Armor versions below 4.5.5 suffer from a privilege escalation vulnerability whereby an authenticated attacker can elevate privileges and execute… |
CVE-2024-1807 | Medium | 6.5 | 2024-04-02 | The Product Sort and Display for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the p… |
CVE-2024-1732 | Medium | 5.3 | 2024-04-02 | The Sharkdropship for AliExpress Dropshipping and Affiliate plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check o… |
CVE-2024-31099 | Medium | 6.4 | 2024-04-01 | Missing Authorization vulnerability in Averta Shortcodes and extra features for Phlox theme auxin-elements.This issue affects Shortcodes and extra features for… |
CVE-2024-2086 | Critical | 10.0 | 2024-03-30 | The Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site plugin for Word… |
CVE-2024-30463 | Medium | 4.3 | 2024-03-29 | Missing Authorization vulnerability in realmag777 BEAR.This issue affects BEAR: from n/a through 1.1.4.3. |
CVE-2024-30477 | Medium | 5.3 | 2024-03-29 | Missing Authorization vulnerability in Klarna Klarna Payments for WooCommerce.This issue affects Klarna Payments for WooCommerce: from n/a through 3.2.4. |
CVE-2024-30469 | Medium | 5.3 | 2024-03-29 | Missing Authorization vulnerability in WPExperts Wholesale For WooCommerce.This issue affects Wholesale For WooCommerce: from n/a through 2.3.0. |
CVE-2024-30508 | Medium | 6.5 | 2024-03-29 | Missing Authorization vulnerability in ThimPress WP Hotel Booking.This issue affects WP Hotel Booking: from n/a through 2.0.9.2. |
CVE-2024-30505 | Medium | 6.5 | 2024-03-29 | Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.18. |
CVE-2024-30487 | High | 7.6 | 2024-03-29 | Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar.This issue affects MP3 Audio Player for Music, Radio… |
CVE-2024-2848 | High | 7.5 | 2024-03-29 | The Responsive theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_footer_text_callback functi… |
CVE-2024-2476 | Medium | 4.3 | 2024-03-29 | The OceanWP theme for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the load_theme_panel_pane function in all ver… |
CVE-2024-2844 | Medium | 4.3 | 2024-03-29 | The Easy Appointments plugin for WordPress is vulnerable to unauthorized modification of data due to insufficient user validation on the ajax_cancel_appointmen… |
CVE-2023-42896 | Medium | 5.5 | 2024-03-28 | An issue was addressed with improved handling of temporary files. This issue is fixed in macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 and iPadOS 17.2… |
CVE-2024-29241 | Critical | 9.9 | 2024-03-28 | Missing authorization vulnerability in System webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated u… |
CVE-2024-29240 | Medium | 4.3 | 2024-03-28 | Missing authorization vulnerability in LayoutSave webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticat… |
CVE-2024-29229 | High | 7.7 | 2024-03-28 | Missing authorization vulnerability in GetLiveViewPath webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authen… |
CVE-2024-29228 | High | 7.7 | 2024-03-28 | Missing authorization vulnerability in GetStmUrlPath webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenti… |
CVE-2024-28004 | Medium | 5.4 | 2024-03-28 | Missing Authorization vulnerability in ExtendThemes Colibri Page Builder.This issue affects Colibri Page Builder: from n/a through 1.0.248. |
CVE-2024-28003 | Medium | 5.4 | 2024-03-28 | Missing Authorization vulnerability in Megamenu Max Mega Menu.This issue affects Max Mega Menu: from n/a through 3.3. |
CVE-2024-2962 | Medium | 5.3 | 2024-03-27 | The Networker - Tech News WordPress Theme with Dark Mode theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability che… |
CVE-2024-30235 | Medium | 4.3 | 2024-03-26 | Missing Authorization vulnerability in Themeisle Multiple Page Generator Plugin – MPG.This issue affects Multiple Page Generator Plugin – MPG: from n/a through… |
CVE-2024-30234 | Medium | 6.5 | 2024-03-26 | Missing Authorization vulnerability in Wholesale Team WholesaleX.This issue affects WholesaleX: from n/a through 1.3.1. |
CVE-2024-2906 | Medium | 6.5 | 2024-03-26 | Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73. |
CVE-2024-22156 | Medium | 6.5 | 2024-03-26 | Missing Authorization vulnerability in SNP Digital SalesKing.This issue affects SalesKing: from n/a through 1.6.15. |
CVE-2023-52214 | Medium | 4.3 | 2024-03-26 | Missing Authorization vulnerability in voidCoders Void Contact Form 7 Widget For Elementor Page Builder.This issue affects Void Contact Form 7 Widget For Eleme… |
CVE-2024-24799 | Medium | 6.5 | 2024-03-26 | Missing Authorization vulnerability in WooCommerce WooCommerce Box Office.This issue affects WooCommerce Box Office: from n/a through 1.2.2. |
CVE-2024-24719 | Medium | 4.3 | 2024-03-26 | Missing Authorization vulnerability in Uriahs Victor Location Picker at Checkout for WooCommerce.This issue affects Location Picker at Checkout for WooCommerce… |
CVE-2024-24718 | Medium | 4.3 | 2024-03-26 | Missing Authorization vulnerability in PropertyHive.This issue affects PropertyHive: from n/a through 2.0.6. |
CVE-2024-24711 | Medium | 4.3 | 2024-03-26 | Missing Authorization vulnerability in weDevs WooCommerce Conversion Tracking.This issue affects WooCommerce Conversion Tracking: from n/a through 2.0.11. |
CVE-2024-23520 | Medium | 4.3 | 2024-03-26 | Missing Authorization vulnerability in AccessAlly PopupAlly.This issue affects PopupAlly: from n/a through 2.1.0. |
CVE-2024-24805 | Medium | 5.3 | 2024-03-26 | Missing Authorization vulnerability in Deepak anand WP Dummy Content Generator.This issue affects WP Dummy Content Generator: from n/a through 3.1.2. |
CVE-2023-27608 | Medium | 6.5 | 2024-03-25 | Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce.This issue affects Points and Rewards for WooCommerce: from n/a through 1.5… |
CVE-2023-25039 | Medium | 4.3 | 2024-03-25 | Missing Authorization vulnerability in CodePeople Google Maps CP.This issue affects Google Maps CP: from n/a through 1.0.43. |
CVE-2023-22699 | Medium | 5.4 | 2024-03-25 | Missing Authorization vulnerability in MainWP MainWP Wordfence Extension.This issue affects MainWP Wordfence Extension: from n/a through 4.0.7. |
CVE-2022-45851 | Medium | 5.4 | 2024-03-25 | Missing Authorization vulnerability in ShareThis ShareThis Dashboard for Google Analytics.This issue affects ShareThis Dashboard for Google Analytics: from n/a… |
CVE-2022-45356 | Medium | 5.4 | 2024-03-25 | Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1. |
CVE-2022-45352 | Medium | 5.4 | 2024-03-25 | Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1. |
CVE-2022-45351 | Medium | 5.4 | 2024-03-25 | Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1. |
CVE-2022-45349 | Medium | 4.3 | 2024-03-25 | Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1. |
CVE-2022-44626 | Medium | 6.3 | 2024-03-25 | Missing Authorization vulnerability in Squirrly SEO Plugin by Squirrly SEO.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.1.20. |
CVE-2022-38057 | Medium | 6.5 | 2024-03-25 | Missing Authorization vulnerability in ThemeHunk Advance WordPress Search Plugin.This issue affects Advance WordPress Search Plugin: from n/a through 1.2.1. |
CVE-2023-37886 | Medium | 5.4 | 2024-03-25 | Missing Authorization vulnerability in InspiryThemes RealHomes.This issue affects RealHomes: from n/a through 4.0.2. |
CVE-2023-37885 | Medium | 4.3 | 2024-03-25 | Missing Authorization vulnerability in InspiryThemes RealHomes.This issue affects RealHomes: from n/a through 4.0.2. |
CVE-2023-33923 | Medium | 4.3 | 2024-03-25 | Missing Authorization vulnerability in HashThemes Viral News, HashThemes Viral, HashThemes HashOne.This issue affects Viral News: from n/a through 1.4.5; Viral… |
CVE-2023-30480 | Medium | 4.3 | 2024-03-25 | Missing Authorization vulnerability in Sparkle WP Educenter.This issue affects Educenter: from n/a through 1.5.5. |
CVE-2024-24840 | Medium | 4.3 | 2024-03-23 | Missing Authorization vulnerability in BdThemes Element Pack Elementor Addons.This issue affects Element Pack Elementor Addons: from n/a through 5.4.11. |
CVE-2024-24835 | Medium | 4.3 | 2024-03-23 | Missing Authorization vulnerability in realmag777 BEAR.This issue affects BEAR: from n/a through 1.1.4. |
CVE-2024-24832 | High | 8.2 | 2024-03-23 | Missing Authorization vulnerability in Metagauss EventPrime.This issue affects EventPrime: from n/a through 3.3.9. |
CVE-2024-27190 | Medium | 4.3 | 2024-03-21 | Missing Authorization vulnerability in Jean-David Daviet Download Media.This issue affects Download Media: from n/a through 1.4.2. |
CVE-2024-1502 | Medium | 5.4 | 2024-03-21 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the t… |
CVE-2023-49981 | High | 7.5 | 2024-03-21 | A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensitive files within the application without… |
CVE-2023-49980 | High | 7.5 | 2024-03-21 | A directory listing vulnerability in Best Student Result Management System v1.0 allows attackers to list directories and sensitive files within the application… |
CVE-2023-49979 | High | 7.5 | 2024-03-21 | A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiri… |
CVE-2023-52229 | Medium | 6.5 | 2024-03-20 | Missing Authorization vulnerability in Save as PDF plugin by Pdfcrowd Word Replacer Pro.This issue affects Word Replacer Pro: from n/a through 1.0. |
CVE-2024-2702 | High | 8.2 | 2024-03-20 | Missing Authorization vulnerability in Olive Themes Olive One Click Demo Import allows importing settings and data, ultimately leading to XSS.This issue affect… |
CVE-2024-1844 | Medium | 4.3 | 2024-03-20 | The RevivePress – Keep your Old Content Evergreen plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capabilit… |
CVE-2024-1181 | Medium | 5.3 | 2024-03-20 | The Coming Soon, Under Construction & Maintenance Mode By Dazzler plugin for WordPress is vulnerable to maintenance mode bypass in all versions up to, and incl… |
CVE-2024-1119 | Medium | 5.3 | 2024-03-20 | The Order Tip for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_tips_to_csv() f… |
CVE-2024-2538 | Medium | 5.4 | 2024-03-20 | The Permalink Manager Lite plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ajax_save_permalin… |
CVE-2024-1995 | Medium | 4.3 | 2024-03-20 | The Smart Custom Fields plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the relational_posts_search() fu… |
CVE-2024-0780 | High | 8.8 | 2024-03-18 | The Enjoy Social Feed plugin for WordPress website WordPress plugin through 6.2.2 does not have authorisation when resetting its database, allowing any authent… |
CVE-2023-6821 | Medium | 6.5 | 2024-03-18 | The Error Log Viewer by BestWebSoft WordPress plugin before 1.1.3 is affected by a Directory Listing issue, allowing users to read and download PHP logs withou… |
CVE-2024-22257 | High | 8.2 | 2024-03-18 | In Spring Security, versions 5.7.x prior to 5.7.12, 5.8.x prior to 5.8.11, versions 6.0.x prior to 6.0.9, versions 6.1.x prior to 6.1.8, versions 6.2.x prior… |
CVE-2024-1857 | Medium | 5.3 | 2024-03-16 | The Ultimate Gift Cards for WooCommerce – Create, Redeem & Manage Digital Gift Certificates with Personalized Templates plugin for WordPress is vulnerable to S… |
CVE-2024-1733 | Medium | 5.3 | 2024-03-16 | The Word Replacer Pro plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the word_replacer_ultra() fu… |
CVE-2023-50898 | Medium | 5.4 | 2024-03-15 | Missing Authorization vulnerability in sirv.Com Sirv.This issue affects Sirv: from n/a through 7.1.2. |
CVE-2024-23944 | Medium | 5.3 | 2024-03-15 | Information disclosure in persistent watchers handling in Apache ZooKeeper due to missing ACL check. It allows an attacker to monitor child znodes by attaching… |
CVE-2024-27953 | Medium | 4.7 | 2024-03-13 | Missing Authorization vulnerability in Cool Plugins Cryptocurrency Widgets – Price Ticker & Coins List.This issue affects Cryptocurrency Widgets – Price Ticker… |
CVE-2024-1862 | High | 8.1 | 2024-03-13 | The WooCommerce Add to Cart Custom Redirect plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capabilit… |
CVE-2024-1843 | Medium | 4.3 | 2024-03-13 | The Auto Affiliate Links plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the aalAddLink function i… |
CVE-2024-1763 | Medium | 6.5 | 2024-03-13 | The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on th… |