CWE-862

An authenticated user may initiate repository migration operations without required repository permissions, potentially

Missing Authorization vulnerability in wpweb Follow My Blog Post follow-my-blog-post allows Exploiting Incorrectly Confi

Missing Authorization vulnerability in codepeople Sell Downloads sell-downloads allows Exploiting Incorrectly Configured

Missing Authorization vulnerability in Marketing Fire LLC LoginWP - Pro allows Accessing Functionality Not Properly Cons

The User Activity Log plugin is vulnerable to a limited options update in versions up to, and including, 2.2. The failed

The Latest Registered Users plugin for WordPress is vulnerable to unauthorized user data export in all versions up to, a

The Reviewify plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check

Missing Authorization vulnerability in sizam REHub Framework rehub-framework allows Accessing Functionality Not Properly

Missing Authorization vulnerability in Kaira Blockons blockons allows Accessing Functionality Not Properly Constrained b

Missing Authorization vulnerability in loopus WP Attractive Donations System - Easy Stripe & Paypal donations WP_Attract

Missing Authorization vulnerability in Scalenut Scalenut scalenut allows Exploiting Incorrectly Configured Access Contro

Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Configured Access Control

Incorrect access control in the selectDept function of RuoYi v4.8.2 allows unauthorized attackers to arbitrarily access

The Frontend File Manager Plugin for WordPress is vulnerable to unauthorized file sharing due to a missing capability ch

The SEO Flow by LupsOnline plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capa

Hollo is a federated single-user microblogging software designed to be federated through ActivityPub. Prior to 0.6.20 an

SAP BusinessObjects BI Platform allows an unauthenticated attacker to craft a specific network request to the trusted en

The BlueSnap Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions

Missing authentication in /admin/student.php and /admin/teacher.php in ProjectWorlds Online Time Table Generator 1.0 all

Missing authentication and authorization in print_membership_card.php in CodeAstro Membership Management System 1.0 allo

MajorDoMo (aka Major Domestic Module) allows unauthenticated arbitrary module uninstallation through the market module.

The GDPR Cookie Consent plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability ch

Missing Authorization vulnerability in WPFunnels Mail Mint mail-mint allows Accessing Functionality Not Properly Constra

Missing Authorization vulnerability in WP Legal Pages WPLegalPages wplegalpages allows Exploiting Incorrectly Configured

Missing Authorization vulnerability in YayCommerce YayCurrency yaycurrency allows Exploiting Incorrectly Configured Acce

Missing Authorization vulnerability in XLPlugins NextMove Lite woo-thank-you-page-nextmove-lite allows Exploiting Incorr

Missing Authorization vulnerability in Saiful Islam Sync Master Sheet – Product Sync with Google Sheet for WooCommerce p

Missing Authorization vulnerability in GhostPool Aardvark Plugin aardvark-plugin allows Exploiting Incorrectly Configure

Missing Authorization vulnerability in GhostPool Gauge gauge allows Exploiting Incorrectly Configured Access Control Sec

Missing Authorization vulnerability in modeltheme ModelTheme Framework modeltheme-framework allows Exploiting Incorrectl

Missing Authorization vulnerability in Jthemes Exzo exzo allows Exploiting Incorrectly Configured Access Control Securit

Missing Authorization vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allows Exploiting Incorrectl

Missing Authorization vulnerability in wpjobportal WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured

The WPGSI: Spreadsheet Integration plugin for WordPress is vulnerable to unauthorized modification and loss of data due

Initiative is a self-hosted project management platform. An access control vulnerability exists in Initiative versions p

phpMyFAQ is an open source FAQ web application. Prior to version 4.0.18, the WebAuthn prepare endpoint (`/api/webauthn/p

Missing Authorization vulnerability in BuddhaThemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-ad

Missing Authorization vulnerability in ThemeRuby Easy Post Submission easy-post-submission allows Exploiting Incorrectly

Missing Authorization vulnerability in WebCodingPlace Responsive Posts Carousel Pro responsive-posts-carousel-pro allows

Missing Authorization vulnerability in vanquish WooCommerce Order Details woocommerce-order-details allows Exploiting In

Missing Authorization vulnerability in designthemes DesignThemes Directory Addon designthemes-directory-addon allows Exp

Missing Authorization vulnerability in designthemes DesignThemes Booking Manager designthemes-booking-manager allows Exp

Missing Authorization vulnerability in Frenify Guff guff allows Exploiting Incorrectly Configured Access Control Securit

OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.0, OliveTin allows an

A Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticate

wpDiscuz before 7.6.47 contains an unauthenticated denial of service vulnerability that allows anonymous users to trigge

The Formidable Forms plugin for WordPress is vulnerable to a payment integrity bypass in all versions up to, and includi

The Appointment Booking Calendar — Simply Schedule Appointments plugin for WordPress is vulnerable to unauthorized acces

Missing Authorization vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Exploiting Incor

Missing Authorization vulnerability in Dotstore Fraud Prevention For Woocommerce woo-blocker-lite-prevent-fake-orders-an