CWE-862: Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Also known as AuthZ.
A kind of CWE-285 Improper Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- woocommerce stripe payment gatewayWooCommerce Stripe Payment Gateway <= 10.7.0 - Missing Authorization to Unauthenticated Order Status Manipulation via 'order' Parameter6.5 Medium
- rara themes metro magazineWordPress Metro Magazine theme <= 1.4.1 - Broken Access Control vulnerability6.5 Medium
- awesomemotive envira photo gallery, envira gallery team photo gallery +1 moreWordPress Envira Photo Gallery plugin <= 1.12.5 - Broken Access Control vulnerability6.5 Medium
- seo squirrly plugin by squirrly seoWordPress SEO Plugin by Squirrly SEO plugin <= 12.4.16 - Broken Access Control vulnerability7.5 High
- kilbot woocommerce posWordPress WooCommerce POS plugin <= 1.8.14 - Broken Access Control vulnerability7.5 High
- artbees jupiterx coreWordPress JupiterX Core plugin <= 4.14.1 - Broken Access Control vulnerability7.5 High
- arraytics wp event solutionWordPress WP Event SOlution plugin <= 4.1.12 - Broken Access Control vulnerability7.5 High
- zealopensource abandoned contact form 7Abandoned Contact Form 7 <= 2.2 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'recover_id' Parameter5.3 Medium
- deepen bajracharya video conferencing with zoomVideo Conferencing with Zoom <= 4.6.7 - Missing Authorization to Unauthenticated Zoom SDK Credential Exposure via 'get_auth' AJAX Action5.3 Medium
- info@welcart welcart e-commerceWordPress Welcart e-Commerce plugin <= 2.11.28 - Broken Access Control vulnerability6.5 Medium
- knit pay payWordPress Knit Pay plugin <= 9.4.0.0 - Broken Access Control vulnerability7.5 High
- hippooo hippoo mobile app for woocommerceWordPress Hippoo Mobile App for WooCommerce plugin <= 1.9.5 - Broken Access Control vulnerability8.2 High
- ahmad js help deskWordPress JS Help Desk plugin <= 3.0.9 - Broken Access Control vulnerability6.5 Medium
- wpclever wpc product bundles for woocommerceWordPress WPC Product Bundles for WooCommerce plugin <= 8.5.3 - Broken Access Control vulnerability7.5 High
- themetechmount truebookerWordPress TrueBooker plugin <= 1.1.9 - Broken Access Control vulnerability9.1 Critical
- montonio for woocommerceWordPress Montonio for WooCommerce plugin <= 10.1.2 - Broken Access Control vulnerability7.5 High
- awesomemotive contact form by wpformsWordPress Contact Form by WPForms plugin <= 1.10.0.4 - Broken Access Control vulnerability7.5 High
- dimitri grassi salon booking systemWordPress Salon booking system plugin <= 10.30.25 - Broken Access Control vulnerability7.5 High
- motive commerce search ai product search for woocommerce – motive commerce searchWordPress AI Product Search for WooCommerce – Motive Commerce Search plugin <= 1.38.2 - Broken Access Control vulnerability8.2 High
- nasir ahmed advanced form integrationWordPress Advanced Form Integration plugin <= 1.126.12 - Broken Access Control vulnerability6.5 Medium
- mamunur rashid classified listingWordPress Classified Listing plugin <= 5.3.9 - Broken Access Control vulnerability6.3 Medium
- mamunur rashid classified listingWordPress Classified Listing plugin <= 5.3.8 - Broken Access Control vulnerability6.5 Medium
- ameliabooking ameliaWordPress Amelia plugin <= 2.2 - Broken Access Control vulnerability6.5 Medium
- mycredWordPress myCred plugin <= 3.0.3 - Broken Access Control vulnerability6.5 Medium
- adrian tobey groundhoggWordPress Groundhogg plugin < 4.4.1 - Broken Access Control vulnerability6.5 Medium
- quantumcloud chatbotWordPress ChatBot plugin <= 7.9.7 - Broken Access Control vulnerability7.1 High
- greg winiarski wpadvertsWordPress WPAdverts plugin <= 2.3.0 - Broken Access Control vulnerability6.5 Medium
- arraytics wp event solutionWordPress Eventin plugin <= 4.1.8 - Broken Access Control vulnerability7.5 High
- royal plugins mcpWordPress Royal MCP plugin <= 1.4.2 - Broken Access Control vulnerability7.3 High
- masaakitanaka booking packageWordPress Booking Package plugin <= 1.7.06 - Broken Access Control vulnerability7.5 High
- rtcamp rtmedia for wordpress, buddypress and bbpressWordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.9 - Broken Access Control vulnerability6.5 Medium
- themeum tutor lmsWordPress Tutor LMS plugin <= 3.9.7 - Broken Access Control vulnerability6.5 Medium
- jose conti redsys for woocommerce lightWordPress Redsys for WooCommerce Light plugin <= 7.0.0 - Broken Access Control vulnerability7.5 High
- themefic ultra addons for wpformsWordPress Ultra Addons for WPForms plugin <= 1.0.11 - Broken Access Control vulnerability6.4 Medium
- ateeq rafeeq repairbuddyWordPress RepairBuddy plugin <= 4.1132 - Broken Access Control vulnerability6.5 Medium
- wp directory kit directory kit, wpdirectorykit wp directory kit +1 moreWordPress WP Directory Kit plugin <= 1.5.0 - Broken Access Control vulnerability7.5 High
- strategy11team awp classifiedsWordPress AWP Classifieds plugin <= 4.4.4 - Broken Access Control vulnerability7.5 High
- booking activities team activitiesWordPress Booking Activities plugin <= 1.16.48.1 - Broken Access Control vulnerability6.5 Medium
- masteriyo - lms, themegrill masteriyo - lms +1 moreWordPress Masteriyo - LMS plugin <= 2.1.5 - Payment Bypass vulnerability7.5 High
- stylemixthemes motorsWordPress Motors plugin < 1.4.107 - Broken Access Control vulnerability6.5 Medium
- easy appointments appointments, easyappointments easy appointments +1 moreWordPress Easy Appointments plugin <= 3.12.21 - Broken Access Control vulnerability7.5 High
- awesomemotive easy digital downloads, easy digital downloads digital downloads +1 moreWordPress Easy Digital Downloads plugin <= 3.6.5 - Broken Access Control vulnerability7.5 High
- wp swings event tickets manager for woocommerceWordPress Event Tickets Manager for WooCommerce plugin <= 1.5.3 - Broken Access Control vulnerability7.5 High
- rank math seo math seoWordPress Rank Math SEO plugin <= 1.0.271 - Broken Access Control vulnerability6.5 Medium
- wp.insider simple membershipWordPress Simple Membership plugin <= 4.7.1 - Broken Access Control vulnerability7.5 High
- wpdeveloper essential addons for elementorWordPress Essential Addons for Elementor plugin < 6.6.0 - Broken Access Control vulnerability5.3 Medium
- themegrill user registrationWordPress User Registration plugin <= 5.1.2 - Broken Access Control vulnerability7.5 High
- mycred bookifyWordPress Bookify plugin <= 1.1.1 - Broken Access Control vulnerability6.5 Medium
- bunny.netWordPress bunny.net plugin <= 2.3.6 - Broken Access Control vulnerability6.3 Medium
- olivetinOliveTin: ValidateArgumentType API Endpoint Missing Authentication Allows Action and Argument Enumeration3.7 Low
- Show moreLoading…