CWE-862: Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Also known as AuthZ.
A kind of CWE-285 Improper Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- metagauss profilegridProfileGrid < 5.9.9.7 - Subscriber+ Cross-User Private Message Thread Deletion and Tampering via Missing Authorization5.4 Medium
- xnau participants databaseParticipants Database <= 2.7.8.3 - Missing Authorization to Unauthenticated Arbitrary Record Update / Sensitive Information Exposure via 'id' Parameter5.3 Medium
- microsoft azure dnsAzure DNS Elevation of Privilege Vulnerability10.0 Critical
- itflow-org itflowITFlow Vulnerable to Authenticated Cross-Tenant Credential Disclosure via Unprotected Credential Modal6.5 Medium
- cyberpanelCyberPanel Missing Authorization in cancelBackupCreation Handler7.2 High
- getgrav gravGrav API Plugin before 1.0.10 Broken Access Control8.2 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote...8.6 High
- themeisle cyr to lat reloaded – transliteration of links and file namesWordPress Cyr to Lat reloaded – transliteration of links and file names plugin <= 1.3.3 - Broken Access Control vulnerability4.3 Medium
- themeum qubelyWordPress Qubely plugin <= 1.8.14 - Broken Access Control vulnerability4.8 Medium
- templatespareWordPress TemplateSpare plugin <= 4.2.2 - Broken Access Control vulnerability4.3 Medium
- iqonic designs graphina – charts and graphs for elementorWordPress Graphina plugin <= 3.1.12 - Broken Access Control vulnerability5.3 Medium
- uxper civi frameworkWordPress Civi Framework plugin <= 2.2.0 - Broken Access Control vulnerability5.3 Medium
- themefusion avada custom brandingWordPress Avada Custom Branding plugin <= 1.2 - Broken Access Control vulnerability4.3 Medium
- sonaar mp3 audio player for music, radio & podcast by sonaarWordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.12 - Broken Access Control vulnerability5.3 Medium
- pixelacehq manual - documentation, knowledge base & education wordpress themeWordPress Manual - Documentation, Knowledge Base & Education WordPress theme theme <= 7.5.4 - Broken Access Control vulnerability7.5 High
- pepro dev. group peprodev ultimate invoiceWordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Broken Access Control vulnerability6.5 Medium
- dokan proWordPress Dokan Pro plugin <= 5.0.3 - Broken Access Control vulnerability7.5 High
- jonathan daggerhart query wranglerWordPress Query Wrangler plugin <= 1.5.57 - Broken Access Control vulnerability4.3 Medium
- la-studio element kit for elementorWordPress LA-Studio Element Kit for Elementor plugin <= 1.6.2 - Broken Access Control vulnerability5.3 Medium
- themegoods photographyWordPress Photography theme <= 7.7.6 - Broken Access Control vulnerability5.3 Medium
- bastien ho event postWordPress Event post plugin <= 6.0.1 - Broken Access Control vulnerability5.3 Medium
- code atlantic content controlWordPress Content Control plugin <= 2.6.5 - Broken Access Control vulnerability5.3 Medium
- analogwp style kitsWordPress Style Kits plugin <= 2.6.5 - Broken Access Control vulnerability6.3 Medium
- mvp themes reviewerWordPress Reviewer plugin <= 3.14.2 - Broken Access Control vulnerability5.4 Medium
- cridiostudio listingproWordPress ListingPro plugin <= 2.9.10 - Broken Access Control vulnerability5.4 Medium
- uxper civiWordPress Civi theme <= 2.2.4 - Broken Access Control vulnerability5.3 Medium
- kit (formerly convertkit)WordPress Kit (formerly ConvertKit) plugin <= 3.3.5 - Broken Access Control vulnerability5.3 Medium
- strategy11 team awp classifiedsWordPress AWP Classifieds plugin <= 4.4.7 - Broken Access Control vulnerability5.3 Medium
- crocoblock jetbookingWordPress JetBooking plugin <= 4.1.2 - Broken Access Control vulnerability5.3 Medium
- yoomoney юkassa для woocommerceWordPress ЮKassa для WooCommerce plugin <= 2.16.1 - Broken Access Control vulnerability4.3 Medium
- motov.net ebook storeWordPress Ebook Store plugin <= 6.19 - Broken Access Control vulnerability5.3 Medium
- motov.net ebook storeWordPress Ebook Store plugin <= 6.19 - Broken Access Control vulnerability5.3 Medium
- woolentor shoplentor proWordPress ShopLentor Pro plugin <= 2.8.5 - Broken Access Control vulnerability4.3 Medium
- woolentor shoplentor proWordPress ShopLentor Pro plugin <= 2.8.5 - Broken Access Control vulnerability5.3 Medium
- payu indiaWordPress PayU India plugin <= 3.8.9 - Broken Access Control vulnerability7.5 High
- shahjada wpdm – premium packagesWordPress WPDM – Premium Packages plugin <= 6.2.0 - Broken Access Control vulnerability7.5 High
- easy payment payment gateway for paypal on woocommerceWordPress Payment Gateway for PayPal on WooCommerce plugin <= 9.1.4 - Broken Access Control vulnerability7.5 High
- wedevs wp erpWordPress WP ERP plugin <= 1.17.5 - Broken Access Control vulnerability6.5 Medium
- saad iqbal wp easypayWordPress WP EasyPay plugin <= 4.5.0 - Arbitrary Content Deletion vulnerability6.5 Medium
- knit pay pay, knitpay knit pay +1 moreWordPress Knit Pay plugin <= 9.6.0.0 - Broken Access Control vulnerability6.5 Medium
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart plugin <= 3.6.10.1 - Broken Access Control vulnerability6.3 Medium
- wpdesk autopay dla woocommerceWordPress Autopay dla WooCommerce plugin <= 2.2.27 - Broken Access Control vulnerability6.5 Medium
- roland murg wp booking system, wp booking system . booking system +1 moreWordPress WP Booking System plugin < 5.12.8.1 - Broken Access Control vulnerability7.1 High
- roland barker participants databaseWordPress Participants Database plugin <= 2.7.8.4 - Broken Access Control vulnerability4.3 Medium
- bplugins yt playerWordPress YT Player plugin <= 2.1.2 - Broken Access Control vulnerability5.3 Medium
- epsiloncool wp fast total searchWordPress WP Fast Total Search plugin <= 1.81.282 - Broken Access Control vulnerability5.3 Medium
- webwizards marketkingWordPress MarketKing plugin <= 2.1.40 - Broken Access Control vulnerability5.3 Medium
- stylemix ulistingWordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerability4.3 Medium
- stylemix ulistingWordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerability5.4 Medium
- axiomthemes quickcal - appointment booking calendar for wordpressWordPress QuickCal - Appointment Booking Calendar for WordPress plugin <= 1.0.16 - Broken Access Control vulnerability6.7 Medium
- Show moreLoading…