CWE-288

The CE21 Suite plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.2.0. This

The Relais 2FA plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.0. This i

The MultiManager WP – Manage All Your WordPress Sites Easily plugin for WordPress is vulnerable to Authentication Bypass

The Really Simple Security (Free, Pro, and Pro Multisite) plugins for WordPress are vulnerable to authentication bypass

The Social Login plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.9.0

The JobSearch WP Job Board plugin for WordPress is vulnerable to privilege escalation in all versions up to, and includi

Authentication Bypass Using an Alternate Path or Channel vulnerability in Information Technology Wawp automation-web-pla

Authentication Bypass Using an Alternate Path or Channel vulnerability in Appgenix Infotech Firebase OTP Authentication

Authentication Bypass Using an Alternate Path or Channel vulnerability in FluxBuilder ListApp Mobile Manager listapp-mob

Authentication Bypass Using an Alternate Path or Channel vulnerability in Codexpert, Inc CoSchool LMS coschool allows Au

Authentication Bypass Using an Alternate Path or Channel vulnerability in extremeidea vBSSO-lite vbsso-lite allows Authe

Authentication Bypass Using an Alternate Path or Channel vulnerability in WofficeIO Woffice woffice allows Authenticatio

The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.6. Thi

Authentication Bypass Using an Alternate Path or Channel vulnerability in VibeThemes WPLMS wplms_plugin allows Authentic

In XLANG OpenAgents through fe73ac4, the allowed_file protection mechanism can be bypassed by using an incorrect file ex

vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow uninten

The N-central server is vulnerable to an authentication bypass of the user interface. This vulnerability is present in a

The N-central server is vulnerable to session rebinding of already authenticated users when using Entra SSO, which can l

Sharp and Toshiba Tec MFPs improperly process HTTP authentication requests, resulting in an authentication bypass vulner

"sessionlist.html" and "sys_trayentryreboot.html" are accessible with no authentication. "sessionlist.html" provides log

TOTOLINK EX200 V4.0.3c.7646_B20201211 allows attackers to bypass login through the Form_Login function.

The Swiss Toolkit For WP plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1

Attackers can bypass the web login authentication process to gain access to the printer's system information and upload

The WP Users Masquerade plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.

The Rover IDX plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.0.0.2905.

Authentication Bypass Using an Alternate Path or Channel vulnerability in Vitalii iBryl Switch User ibryl-switch-user al

The User Toolkit plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.2.3. Th

Authentication Bypass Using an Alternate Path or Channel vulnerability in yespbs Token Login token-login allows Authenti

Authentication Bypass Using an Alternate Path or Channel vulnerability in Projectopia Projectopia projectopia-core allow

Authentication Bypass Using an Alternate Path or Channel vulnerability in wovax Wovax IDX wovax-idx allows Authenticatio

An issue in Cute Http File Server v.3.1 allows a remote attacker to escalate privileges via the password verification co

parisneo/lollms-webui is vulnerable to authentication bypass due to insufficient protection over sensitive endpoints. Th

In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 authentication bypass was possible in specific e

The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to authentication bypa

The Jupiter X Core plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 4.7

The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to authentication bypass in versions up

The Login With OTP plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.4.2.

An authentication bypass vulnerability in Veeam Agent for Microsoft Windows allows for local privilege escalation.

Authentication Bypass vulnerability in Hitachi Ops Center Common Services.This issue affects Hitachi Ops Center Common S

The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a local authentication bypass by a low privileged a

An authentication bypass weakness in the message broker service of Ivanti Workspace Control before version 2025.2 (10.19

A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions 7.2.4

IBM OpenBMC FW1050.00 through FW1050.10 BMCWeb HTTPS server component could disclose sensitive URI content to an unautho

A vulnerability in the combination of the OpenBMC's FW1050.00 through FW1050.10, FW1030.00 through FW1030.50, and FW1020

The eHRD CTMS from Sunnet has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to bypas

The External Database Based Actions plugin for WordPress is vulnerable to authentication bypass in versions up to, and i

Certain models of routers from Billion Electric has an Authentication Bypass vulnerability, allowing unautheticated atta

The WooCommerce - Social Login plugin for WordPress is vulnerable to authentication bypass in versions up to, and includ

The WooCommerce - PDF Vouchers plugin for WordPress is vulnerable to authentication bypass in versions up to, and includ

Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authenticatio