CWE-862: Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Also known as AuthZ.
A kind of CWE-285 Improper Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- wp folio team ppwpWordPress PPWP plugin <= 1.9.15 - Broken Access Control vulnerability5.4 Medium
- stellarwp restrict contentWordPress Restrict Content plugin <= 3.2.22 - Broken Access Control vulnerability7.5 High
- premmerce redirect managerWordPress Premmerce Redirect Manager plugin <= 1.0.12 - Broken Access Control vulnerability6.5 Medium
- crm perks wp insightly for contact form 7, wpforms, elementor, formidable and ninja formsWordPress WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin <= 1.1.5 - Broken Access Control vulnerability6.5 Medium
- kamleshyadav miraculousWordPress Miraculous theme < 2.1.2 - Broken Access Control vulnerability7.5 High
- anton voytenko petitionerWordPress Petitioner plugin <= 0.7.3 - Broken Access Control vulnerability6.5 Medium
- wp-configurator wp configurator proWordPress WP Configurator Pro plugin <= 3.7.9 - Broken Access Control vulnerability7.1 High
- metagauss registrationmagicWordPress RegistrationMagic plugin <= 6.0.7.6 - Broken Access Control vulnerability7.5 High
- link software llc wp terms popupWordPress WP Terms Popup plugin <= 2.10.0 - Broken Access Control vulnerability7.5 High
- bplugins b blocksWordPress B Blocks plugin < 2.0.30 - Broken Access Control vulnerability6.5 Medium
- wedevs wp user frontendWordPress WP User Frontend plugin <= 4.2.8 - Broken Access Control vulnerability7.5 High
- codepeople contact form emailWordPress Contact Form Email plugin <= 1.3.63 - Broken Access Control vulnerability6.5 Medium
- webtoffee comments import & exportWordPress Comments Import & Export plugin <= 2.4.9 - Broken Access Control vulnerability7.7 High
- devteam haywoodtech product rearrange for woocommerceWordPress Product Rearrange for WooCommerce plugin <= 1.2.2 - Broken Access Control vulnerability8.2 High
- arraytics wpcafeWordPress WPCafe plugin <= 3.0.7 - Broken Access Control vulnerability9.1 Critical
- kaira storecustomizerWordPress StoreCustomizer plugin <= 2.6.3 - Broken Access Control vulnerability6.5 Medium
- viabill for woocommerce – woocommerceWordPress ViaBill – WooCommerce plugin <= 1.1.53 - Settings Change vulnerability6.5 Medium
- avalexWordPress avalex plugin <= 3.1.3 - Broken Access Control vulnerability6.5 Medium
- liquidthemes ave coreWordPress Ave Core plugin <= 2.9.1 - Broken Access Control vulnerability6.3 Medium
- aarsiv groups automated fedex live/manual rates with shipping labelsWordPress Automated FedEx live/manual rates with shipping labels plugin <= 5.1.9 - Broken Access Control vulnerability7.3 High
- pickplugins product slider for woocommerceWordPress Product Slider for WooCommerce plugin <= 1.13.61 - Broken Access Control vulnerability6.5 Medium
- mvpthemes the leagueWordPress The League theme <= 4.4.1 - Broken Access Control vulnerability6.5 Medium
- سید محمدامین هاشمی gzseoWordPress GZSEO plugin <= 2.0.14 - Broken Access Control vulnerability6.5 Medium
- crm perks integration for mailchimp and contact form 7, wpforms, elementor, ninja formsWordPress Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.2.2 - Broken Access Control vulnerability6.5 Medium
- arni cinco wpcargo track & traceWordPress WPCargo Track & Trace plugin <= 8.0.2 - Broken Access Control vulnerability7.5 High
- webilia vertex addons for elementorWordPress Vertex Addons for Elementor plugin <= 1.6.4 - Broken Access Control vulnerability6.5 Medium
- coderpress commerce coinbase for woocommerceWordPress Commerce Coinbase For WooCommerce plugin <= 1.6.6 - Broken Access Control vulnerability7.5 High
- saad iqbal new user approveWordPress New User Approve plugin <= 3.2.3 - Broken Access Control vulnerability6.5 Medium
- özgür karalar kargo takipWordPress Kargo Takip plugin < 0.2.4 - Broken Access Control vulnerability6.5 Medium
- rustaurius five star restaurant reservationsWordPress Five Star Restaurant Reservations plugin <= 2.7.9 - Broken Access Control vulnerability6.5 Medium
- tychesoftwares print invoice & delivery notes for woocommerceWordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 5.9.0 - Broken Access Control vulnerability7.5 High
- publishpress authorsWordPress PublishPress Authors plugin <= 4.10.1 - Broken Access Control vulnerability7.5 High
- iqonic design kivicareWordPress KiviCare plugin <= 3.6.16 - Broken Access Control vulnerability6.5 Medium
- radiustheme teamWordPress Team plugin <= 5.0.11 - Broken Access Control vulnerability7.5 High
- raratheme education zoneWordPress Education Zone theme <= 1.3.8 - Broken Access Control vulnerability6.5 Medium
- activity-log.com wp system logWordPress WP System Log plugin <= 1.2.7 - Broken Access Control vulnerability6.5 Medium
- elated-themes elated listingWordPress Elated Listing plugin <= 1.4 - Broken Access Control vulnerability6.5 Medium
- wproyal news magazine xWordPress News Magazine X theme <= 1.2.50 - Broken Access Control vulnerability7.5 High
- javier casares wpvulnerabilityWordPress WPVulnerability plugin <= 4.2.1 - Broken Access Control vulnerability6.5 Medium
- theme-one the gridWordPress The Grid plugin <= 2.8.0 - Broken Access Control vulnerability7.1 High
- wedevs wp user frontendWordPress WP User Frontend plugin <= 4.2.5 - Broken Access Control vulnerability6.5 Medium
- loopus wp cost estimation & payment forms builderWordPress WP Cost Estimation & Payment Forms Builder plugin < 10.3.0 - Broken Access Control vulnerability7.5 High
- bdthemes ultimate post kitWordPress Ultimate Post Kit plugin <= 4.0.21 - Broken Access Control vulnerability6.4 Medium
- wpfactory helpdesk support ticket system for woocommerceWordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.2 - Broken Access Control vulnerability7.5 High
- magepeopleteam booking and rental managerWordPress Booking and Rental Manager plugin <= 2.6.0 - Broken Access Control vulnerability6.5 Medium
- blueglass interactive ag jobs for wordpressWordPress Jobs for WordPress plugin <= 2.8 - Broken Access Control vulnerability7.5 High
- ruhul amin my album galleryWordPress My Album Gallery plugin <= 1.0.4 - Arbitrary File Deletion vulnerability6.5 Medium
- metagauss eventprimeWordPress EventPrime plugin <= 4.2.6.0 - Broken Access Control vulnerability7.5 High
- linux, linux kernel +1 morexen/privcmd: restrict usage in unprivileged domU8.2 High
- ech0Ech0 authenticated user-list exposed data via public `/api/allusers` endpoint5.3 Medium
- Show moreLoading…