CWE-862: Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Also known as AuthZ.
A kind of CWE-285 Improper Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- shiptime shiptime: discounted shipping ratesWordPress ShipTime: Discounted Shipping Rates plugin <= 1.1.1 - Broken Access Control vulnerability5.3 Medium
- nitrojs nitropackWordPress NitroPack plugin <= 1.19.3 - Broken Access Control vulnerability5.3 Medium
- g5theme book previewer for woocommerceWordPress Book Previewer for Woocommerce plugin <= 1.0.6 - Broken Access Control vulnerability5.3 Medium
- leadrebelWordPress Leadrebel plugin <= 1.0.2 - Broken Access Control vulnerability5.3 Medium
- themetechmount truebookerWordPress TrueBooker plugin <= 1.1.5 - Broken Access Control vulnerability5.3 Medium
- prowcplugins product price by formula for woocommerceWordPress Product Price by Formula for WooCommerce plugin <= 2.5.6 - Broken Access Control vulnerability5.3 Medium
- coding panda panda pods repeater fieldWordPress Panda Pods Repeater Field plugin <= 1.5.12 - Broken Access Control vulnerability5.3 Medium
- leadlovers formsWordPress leadlovers forms plugin <= 1.0.2 - Broken Access Control vulnerability5.3 Medium
- razorpay for woocommerceWordPress Razorpay for WooCommerce plugin <= 4.8.2 - Broken Access Control vulnerability5.3 Medium
- deepen bajracharya video conferencing with zoomWordPress Video Conferencing with Zoom plugin <= 4.6.6 - Broken Access Control vulnerability4.3 Medium
- igms direct bookingWordPress iGMS Direct Booking plugin <= 1.3 - Broken Access Control vulnerability5.3 Medium
- totalsuite total poll liteWordPress Total Poll Lite plugin <= 4.12.0 - Broken Access Control vulnerability6.5 Medium
- unitech web unitechpayWordPress UnitechPay plugin <= 1.0.2 - Broken Access Control vulnerability5.3 Medium
- themebeez royale newsWordPress Royale News theme <= 2.2.4 - Broken Access Control vulnerability5.3 Medium
- themebeez cream blogWordPress Cream Blog theme <= 2.1.7 - Broken Access Control vulnerability5.3 Medium
- roxnor wp ultimate reviewWordPress Wp Ultimate Review plugin <= 2.3.8 - Broken Access Control vulnerability5.3 Medium
- payment plugins for paypal woocommerceWordPress Payment Plugins for PayPal WooCommerce plugin <= 2.0.13 - Broken Access Control vulnerability5.3 Medium
- redpixelstudios rps include contentWordPress RPS Include Content plugin <= 1.2.2 - Broken Access Control vulnerability6.5 Medium
- spabrice mogiWordPress Mogi theme <= 1.2.3 - Arbitrary Shortcode Execution vulnerability5.3 Medium
- ronik@unlimitedwp wpschoolpressWordPress WPSchoolPress plugin <= 2.2.35 - Broken Access Control vulnerability4.9 Medium
- wproyal asheWordPress Ashe theme <= 2.266 - Broken Access Control vulnerability4.3 Medium
- kutethemes biolifeWordPress Biolife theme <= 3.2.3 - Arbitrary Shortcode Execution vulnerability5.3 Medium
- acmethemes education baseWordPress Education Base theme <= 3.0.8 - Broken Access Control vulnerability5.3 Medium
- ilghera jw player for wordpressWordPress JW Player for WordPress plugin <= 2.3.6 - Broken Access Control vulnerability5.4 Medium
- kutethemes kuteshopWordPress KuteShop theme <= 4.2.9 - Arbitrary Shortcode Execution vulnerability5.3 Medium
- pankaj kumar wpxmas-snowWordPress WpXmas-Snow plugin <= 1.1 - Broken Access Control vulnerability5.3 Medium
- wava.co wava paymentWordPress Wava Payment plugin <= 0.3.7 - Broken Access Control vulnerability5.3 Medium
- ipospays gateways wcWordPress iPOSpays Gateways WC plugin <= 1.3.7 - Broken Access Control vulnerability5.3 Medium
- wpbens filter plusWordPress Filter Plus plugin <= 1.1.17 - Broken Access Control vulnerability5.4 Medium
- foysal imran bizreviewWordPress BizReview plugin <= 1.5.13 - Broken Access Control vulnerability5.3 Medium
- obadiah super custom loginWordPress Super Custom Login plugin <= 1.1 - Broken Access Control vulnerability5.3 Medium
- rustaurius order trackingWordPress Order Tracking plugin <= 3.4.3 - Broken Access Control vulnerability5.3 Medium
- andy ha departWordPress DEPART plugin <= 1.0.7 - Broken Access Control vulnerability4.3 Medium
- nmerii nm gift registry and wishlist liteWordPress NM Gift Registry and Wishlist Lite plugin <= 5.13 - Broken Access Control vulnerability5.3 Medium
- arraytics bookticsWordPress Booktics plugin <= 1.0.16 - Broken Access Control vulnerability5.3 Medium
- aa web servant 12 step meeting listWordPress 12 Step Meeting List plugin <= 3.19.9 - Broken Access Control vulnerability6.5 Medium
- magepeopleteam wptravellyWordPress WpTravelly plugin <= 2.1.7 - Broken Access Control vulnerability4.3 Medium
- illid share this imageWordPress Share This Image plugin <= 2.12 - Broken Access Control vulnerability5.3 Medium
- boldgrid client invoicing by sprout invoicesWordPress Client Invoicing by Sprout Invoices plugin <= 20.8.10 - Broken Access Control vulnerability5.3 Medium
- wp chill revive.soWordPress Revive.so plugin <= 2.0.7 - Broken Access Control vulnerability5.3 Medium
- themefic tourficWordPress Tourfic plugin <= 2.21.4 - Broken Access Control vulnerability5.3 Medium
- fullworks display eventbrite eventsWordPress Display Eventbrite Events plugin <= 6.5.6 - Broken Access Control vulnerability5.3 Medium
- wp delicious deliciousWordPress WP Delicious plugin <= 1.9.5 - Broken Access Control vulnerability5.3 Medium
- wedevs wedocsWordPress weDocs plugin <= 2.1.18 - Broken Access Control vulnerability5.3 Medium
- wpwax directoristWordPress Directorist plugin <= 8.5.10 - Broken Access Control vulnerability5.3 Medium
- jordy meow ai engine (pro)WordPress AI Engine (Pro) plugin < 3.4.2 - Broken Access Control vulnerability4.3 Medium
- craig hewitt seriously simple podcastingWordPress Seriously Simple Podcasting plugin <= 3.14.2 - Broken Access Control vulnerability5.3 Medium
- instawp connectWordPress InstaWP Connect plugin <= 0.1.2.5 - Broken Access Control vulnerability5.4 Medium
- realmag777 foxWordPress FOX plugin <= 1.4.5 - Broken Access Control vulnerability5.3 Medium
- surecartWordPress SureCart plugin <= 4.0.2 - Broken Access Control vulnerability6.5 Medium
- Show moreLoading…