CWE-862: Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Also known as AuthZ.
A kind of CWE-285 Improper Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- lin-snow ech0Ech0 before 4.4.3 Missing Authorization via dashboard log endpoints7.1 High
- chamilo lms, chamilo-lms +1 moreChamilo LMS has REST API PII Exposure via get_user_info_from_username6.5 Medium
- chamilo lms, chamilo-lms +1 moreChamilo LMS has an IDOR in REST API Stats Endpoint Exposes Any User's Learning Data6.5 Medium
- go-vikunja vikunjaVikunja has Missing Authorization on CalDAV Task Read4.3 Medium
- rocketgenius gravity smtpGravity SMTP <= 2.1.4 - Missing Authorization to Authenticated (Subscriber+) Plugin Uninstall7.1 High
- stiofansisland userswp – front-end login form, user registration, user profile & members directory plugin for wpUsersWP <= 1.2.58 - Authenticated (Subscriber+) Restricted Usermeta Modification via 'htmlvar' Parameter4.3 Medium
- codename065 download managerDownload Manager <= 3.3.51 - Missing Authorization to Authenticated (Contributor+) Media File Protection Removal4.3 Medium
- themeum tutor lms – elearning and online course solutionTutor LMS <= 3.9.7 - Missing Authorization to Unauthenticated Arbitrary Billing Profile Overwrite via 'order_id' Parameter7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Missing Authorization for specific 'request' CLI commands in a JDM/CSDS scenario6.3 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Specific low privileged CLI command exposes sensitive information6.8 Medium
- mervinpraison praisonaiagentsPraisonAIAgents Affected by Arbitrary File Read via read_skill_file Missing Workspace Boundary and Approval Gate6.2 Medium
- openplc v3 v3, openplcproject openplc v3 firmware +1 moreMissing Authorization in OpenPLC_V38.7 High
- control system alanweb scada, hydrosystem.poznan control system +1 moreMissing Authorization inAlanWeb SCADA8.8 High
- davidfcarr quick playgroundQuick Playground <= 1.3.1 - Missing Authorization to Unauthenticated Arbitrary File Upload9.8 Critical
- oliverfriedmann ziggeoZiggeo <= 3.1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via 'ziggeo_ajax' AJAX Action5.4 Medium
- webilia vertex addons for elementorVertex Addons for Elementor <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation and Activation via 'afeb_activate_required_plugins'8.8 High
- gitlabMissing Authorization in GitLab4.3 Medium
- gitlabMissing Authorization in GitLab2.7 Low
- zammadZammad is miissing authorization in AI assistance controller for context data used in text tools5.3 Medium
- zammadZammad has improper access control in AI assistance controller for text tools5.3 Medium
- zammadZammad is missing authorization in ticket create endpoint6.9 Medium
- vsourz1td advanced contact form 7 dbAdvanced CF7 DB <= 2.0.9 - Missing Authorization to Authenticated (Subscriber+) Form Submissions Excel Export4.3 Medium
- kcpkcp's cache server is accessible without authentication or authorization checks8.2 High
- xwiki, org.xwiki.platform xwiki-platform-legacy-oldcore, xwiki-platform-oldcore +1 more +3 moreXWiki Platform affected by remote code execution with script right through unprotected Velocity scripting API8.6 High
- ckthemes flipmartWordPress Flipmart theme <= 2.8 - Broken Access Control vulnerability5.3 Medium
- anytrack affiliate link managerWordPress AnyTrack Affiliate Link Manager plugin <= 1.5.5 - Broken Access Control vulnerability5.3 Medium
- g5theme g5plus aprilWordPress G5Plus April theme <= 6.8 - Broken Access Control vulnerability5.3 Medium
- mailercloud – integrate webforms and synchronize website contactsWordPress Mailercloud – Integrate webforms and synchronize website contacts plugin <= 1.0.7 - Broken Access Control vulnerability5.3 Medium
- zealousweb accept paypal payments using contact form 7WordPress Accept PayPal Payments using Contact Form 7 plugin <= 4.0.4 - Broken Access Control vulnerability5.3 Medium
- netro systems make my triviaWordPress Make My Trivia plugin <= 1.1.0 - Broken Access Control vulnerability5.3 Medium
- mulika team mipl wc multisite syncWordPress MIPL WC Multisite Sync plugin <= 1.4.4 - Broken Access Control vulnerability5.3 Medium
- nfusionsolutions precious metals automated product pricing – proWordPress Precious Metals Automated Product Pricing – Pro plugin <= 4.0.5 - Broken Access Control vulnerability5.3 Medium
- andrew shopwpWordPress ShopWP plugin <= 5.2.4 - Broken Access Control vulnerability5.3 Medium
- wpxpo wowoptinWordPress WowOptin plugin <= 1.4.32 - Broken Access Control vulnerability5.3 Medium
- massiveshift ai workflow automationWordPress AI Workflow Automation plugin <= 1.4.2 - Broken Access Control vulnerability5.3 Medium
- publisherdesk the publisher desk ads.txtWordPress The Publisher Desk ads.txt plugin <= 1.5.0 - Broken Access Control vulnerability5.3 Medium
- hbss technologies maio – the new ai geo / seo toolWordPress MAIO – The new AI GEO / SEO tool plugin <= 6.2.8 - Broken Access Control vulnerability5.3 Medium
- nsquared simply schedule appointmentsWordPress Simply Schedule Appointments plugin <= 1.6.10.2 - Broken Access Control vulnerability5.3 Medium
- adastracrypto cryptocurrency donation box – bitcoin & crypto donationsWordPress Cryptocurrency Donation Box – Bitcoin & Crypto Donations plugin <= 2.2.13 - Broken Access Control vulnerability5.3 Medium
- paul bearne author avatars list/blockWordPress Author Avatars List/Block plugin <= 2.1.25 - Broken Access Control vulnerability5.3 Medium
- eshipper commerceWordPress eShipper Commerce plugin <= 2.16.12 - Broken Access Control vulnerability5.3 Medium
- glowlogix wp frontend profileWordPress WP Frontend Profile plugin <= 1.3.9 - Broken Access Control vulnerability5.3 Medium
- rapid car check vehicle dataWordPress Rapid Car Check Vehicle Data plugin <= 2.0 - Broken Access Control vulnerability5.3 Medium
- lvaudore the moneytizerWordPress The Moneytizer plugin <= 10.0.10 - Broken Access Control vulnerability5.3 Medium
- arjan pronk linkpizza-managerWordPress linkPizza-Manager plugin <= 5.5.5 - Broken Access Control vulnerability5.3 Medium
- mwp development diet calorie calculatorWordPress Diet Calorie Calculator plugin <= 1.1.1 - Broken Access Control vulnerability5.3 Medium
- dotonpaper pinpoint booking system, pinpoint booking system booking system +1 moreWordPress Pinpoint Booking System plugin <= 2.9.9.7.2 - Broken Access Control vulnerability5.3 Medium
- codename065 download managerWordPress Download Manager plugin <= 3.3.52 - Broken Access Control vulnerability5.3 Medium
- webmuehle court reservationWordPress Court Reservation plugin <= 1.10.11 - Broken Access Control vulnerability5.3 Medium
- shrikantkale izootoWordPress iZooto plugin <= 3.7.20 - Broken Access Control vulnerability5.3 Medium
- Show moreLoading…