CWE-862: Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Also known as AuthZ.
A kind of CWE-285 Improper Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- themegrill user registration WordPress User Registration plugin <= 5.3.1 - Broken Access Control vulnerability 5.3 Medium
- pluginus.net fox WordPress FOX plugin <= 1.5.6 - Broken Access Control vulnerability 5.3 Medium
- elightup meta box – wordpress custom fields framework WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.3 - Broken Access Control vulnerability 6.5 Medium
- themegrill user registration WordPress User Registration plugin <= 5.3.1 - Broken Access Control vulnerability 5.3 Medium
- frappe erpnext Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_linked_material_requests 5.3 Medium
- frappe erpnext Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_bom_items 7.1 High
- frappe erpnext Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_open_activities 7.1 High
- frappe erpnext Frappe ERPNext before 15.121.4 and 16.36.0 Missing Authorization via get_linked_payments_for_doc 5.3 Medium
- stylemixthemes motors WordPress Motors plugin <= 1.4.128 - Broken Access Control vulnerability 4.3 Medium
- shahjahan jewel fluent booking WordPress Fluent Booking plugin <= 2.5.0 - Broken Access Control vulnerability 5.4 Medium
- wp user manager user manager WordPress WP User Manager plugin <= 2.10.4 - Broken Access Control vulnerability 5.3 Medium
- bakkbone australia floristpress WordPress FloristPress plugin <= 7.8.5 - Broken Access Control vulnerability 4.3 Medium
- leap13 premium blocks – gutenberg blocks for wordpress WordPress Premium Blocks – Gutenberg Blocks for WordPress plugin <= 2.3.18 - Broken Access Control vulnerability 5.3 Medium
- villatheme curcy WordPress CURCY plugin <= 2.2.20 - Broken Access Control vulnerability 5.3 Medium
- mycred WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability 5.3 Medium
- villatheme curcy WordPress CURCY plugin <= 2.2.20 - Broken Access Control vulnerability 5.3 Medium
- themehigh checkout field editor for woocommerce (pro) Checkout Field Editor for WooCommerce (Pro) <= 3.8.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'attachment_id' Parameter via thwcfe_remove_uploaded AJAX Action 9.1 Critical
- wp desk autopay dla woocommerce WordPress Autopay dla WooCommerce plugin <= 2.3.0 - Broken Access Control vulnerability 5.3 Medium
- hivepress WordPress HivePress plugin <= 1.8.1 - Broken Access Control vulnerability 4.3 Medium
- ahmad js help desk WordPress JS Help Desk plugin <= 5.0.3 - Broken Access Control vulnerability 5.3 Medium
- stylemixthemes motors WordPress Motors plugin <= 1.4.128 - Broken Access Control vulnerability 4.3 Medium
- videowhisper.com 2way videocalls and random chat WordPress 2Way VideoCalls and Random Chat plugin <= 6.1.9 - Broken Access Control vulnerability 5.3 Medium
- tms ivyforms WordPress IvyForms plugin <= 1.5.1 - Broken Access Control vulnerability 5.3 Medium
- everest forms forms, wpeverest everest forms +1 more WordPress Everest Forms plugin <= 3.6.3 - Broken Access Control vulnerability 4.3 Medium
- ajay contextual related posts WordPress Contextual Related Posts plugin <= 4.5.3 - Broken Access Control vulnerability 4.3 Medium
- cozmoslabs paid member subscriptions WordPress Paid Member Subscriptions plugin <= 3.1.3 - Broken Access Control vulnerability 5.3 Medium
- wp desk dropshipping xml for woocommerce WordPress Dropshipping XML for WooCommerce plugin <= 1.7.4 - Broken Access Control vulnerability 4.3 Medium
- mamunur rashid radius booking — booking calendar for appointments & services WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.20 - Broken Access Control vulnerability 5.3 Medium
- mahmudul hasan arif fluentboards WordPress FluentBoards plugin <= 2.2.2 - Broken Access Control vulnerability 4.3 Medium
- themegrill user registration WordPress User Registration plugin <= 5.3.0 - Broken Access Control vulnerability 4.3 Medium
- brainstorm force sureforms WordPress SureForms plugin <= 2.13.0 - Broken Access Control vulnerability 5.3 Medium
- ameliabooking booking for appointments and events calendar – amelia Booking for Appointments and Events Calendar <= 9.9.1 - Missing Authorization to Unauthenticated Arbitrary Event Attendee Data Exposure via '/report/event/attendees' Endpoint 7.5 High
- ameliabooking booking for appointments and events calendar – amelia Booking for Appointments and Events Calendar <= 9.9.1 - Missing Authorization to Authenticated (Custom+) Sensitive Information Disclosure via '/report/event/bookings' Endpoint 6.5 Medium
- bdthemes ultimate store kit elementor addons WordPress Ultimate Store Kit Elementor Addons plugin <= 4.0.1 - Broken Access Control vulnerability 5.3 Medium
- mycred WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability 4.3 Medium
- brainstorm force cartflows WordPress CartFlows plugin <= 3.3.0 - Broken Access Control vulnerability 5.3 Medium
- david lingren media library assistant WordPress Media LIbrary Assistant plugin <= 3.43 - Broken Access Control vulnerability 4.3 Medium
- wc lovers wcfm membership WordPress WCFM Membership plugin <= 2.12.0 - Broken Access Control vulnerability 4.3 Medium
- wpmet metform WordPress Metform plugin <= 4.3.3 - Broken Access Control vulnerability 4.3 Medium
- moreconvert mc woocommerce wishlist WordPress MC Woocommerce Wishlist plugin <= 2.0.3 - Broken Access Control vulnerability 5.3 Medium
- blubrry powerpress podcasting WordPress PowerPress Podcasting plugin <= 11.18.0 - Broken Access Control vulnerability 5.4 Medium
- leap13 premium blocks – gutenberg blocks for wordpress WordPress Premium Blocks – Gutenberg Blocks for WordPress plugin <= 2.3.18 - Broken Access Control vulnerability 5.3 Medium
- thimpress learnpress WordPress LearnPress plugin <= 4.4.12 - Broken Access Control vulnerability 5.4 Medium
- wpvibes anywhere elementor WordPress AnyWhere Elementor plugin <= 1.3.0 - Broken Access Control vulnerability 5.4 Medium
- shahjahan jewel fluent booking WordPress Fluent Booking plugin <= 2.5.0 - Broken Access Control vulnerability 5.3 Medium
- wc lovers wcfm marketplace WordPress WCFM Marketplace plugin <= 3.8.3 - Broken Access Control vulnerability 4.3 Medium
- mycred WordPress myCred plugin <= 4.0.2 - Broken Access Control vulnerability 5.3 Medium
- infomaniak network vod infomaniak WordPress VOD Infomaniak plugin <= 1.5.15 - Broken Access Control vulnerability 4.3 Medium
- wedevs wedocs WordPress weDocs plugin <= 2.6.1 - Broken Access Control vulnerability 5.3 Medium
- unknown wp-lister lite for amazon WordPress WP-Lister Lite for Amazon plugin <= 2.9.2 - Broken Access Control vulnerability 5.3 Medium
- Show olderLoading…