CWE-862

Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8.

Missing Authorization vulnerability in Crafthemes Crafthemes Demo Import crafthemes-demo-import allows Exploiting Incorr

Users with "User:edit" and "Self:api" permissions can promote or demote themselves or other users by performing changes

Missing Authorization vulnerability in POSIMYTH Nexter.This issue affects Nexter: from n/a through 2.0.3.

Missing Authorization vulnerability in Muffin Group Betheme.This issue affects Betheme: from n/a through 27.1.1.

Missing Authorization vulnerability in Saturday Drive Ninja Forms.This issue affects Ninja Forms: from n/a through 3.6.2

Missing Authorization vulnerability in ThimPress LearnPress.This issue affects LearnPress: from n/a through 4.2.3.

Missing Authorization vulnerability in Saturday Drive Ninja Forms.This issue affects Ninja Forms: from n/a through 3.6.2

NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker may cause an u

Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control S

The Debug Log Manager WordPress plugin before 2.3.0 contains a Directory listing vulnerability was discovered, which all

The EazyDocs WordPress plugin before 2.3.6 does not have authorization and CSRF checks when handling documents and does

nGrinder before 3.5.9 allows an attacker to create or update webhook configuration due to lack of access control, which

The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) p

A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files

A directory listing vulnerability in Best Student Result Management System v1.0 allows attackers to list directories and

A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensiti

The Responsive theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check

A vulnerability was reported in some Lenovo Printers that could allow an unauthenticated attacker to obtain the administ

Authentication vulnerability in the API for app pre-loading. Impact: Successful exploitation of this vulnerability may a

The WP Compress – Image Optimizer plugin for WordPress is vulnerable to unauthorized modification of data due to a missi

Missing Authorization vulnerability in WPExperts Wholesale For WooCommerce.This issue affects Wholesale For WooCommerce:

Missing Authorization vulnerability in Saleswonder Team: Tobias 5 Stars Rating Funnel 5-stars-rating-funnel.This issue a

Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar.This issue aff

Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a thro

Missing Authorization vulnerability in Mitchell Bennis Simple File List.This issue affects Simple File List: from n/a th

Missing Authorization vulnerability in ProFaceOff SSU.This issue affects SSU: from n/a through 1.5.0.

Missing Authorization vulnerability in Piotnet Piotnet Addons For Elementor Pro.This issue affects Piotnet Addons For El

Missing Authorization vulnerability in Tips and Tricks HQ Easy Accept Payments.This issue affects Easy Accept Payments:

Missing Authorization vulnerability in Leaky Paywall.This issue affects Leaky Paywall: from n/a through 4.20.8.

Missing Authorization vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlove Podcast Publisher: f

Missing Authorization vulnerability in Woo product importer Sharkdropship dropshipping for Aliexpress, eBay, Amazon, ets

Missing Authorization vulnerability in Joseph C Dolson My Tickets.This issue affects My Tickets: from n/a through 1.9.11

The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulner

In lunary-ai/lunary version 1.2.2, the DELETE endpoint located at `packages/backend/src/api/v1/datasets` is vulnerable t

MIT IdentiBot is an open-source Discord bot written in Node.js that verifies individuals' affiliations with MIT, grants

Missing Authorization vulnerability in Netgsm.This issue affects Netgsm: from n/a through 2.9.19.

An improper access control vulnerability exists in the gaizhenbiao/chuanhuchatgpt application, specifically in version 2

Missing Authentication for Critical Function, Missing Authorization vulnerability in PORTY Smart Tech Technology Joint S

An Incorrect Authorization vulnerability exists in lunary-ai/lunary versions up to and including 1.2.2, which allows una

The Market Exporter plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on

Missing Authorization vulnerability in Bricksforge.This issue affects Bricksforge: from n/a through 2.0.17.

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Fo

Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8.

Missing Authorization vulnerability in BizSwoop a CPF Concepts, LLC Brand BizPrint.This issue affects BizPrint: from n/a

Missing Authorization vulnerability in WP Travel Engine.This issue affects WP Travel Engine: from n/a through 5.8.0.

Missing Authorization vulnerability in Olive Themes Olive One Click Demo Import.This issue affects Olive One Click Demo

Missing Authorization vulnerability in zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pic

Missing Authorization vulnerability in Consensu.IO Consensu.Io.This issue affects Consensu.Io: from n/a through 1.0.1.

Missing Authorization vulnerability in Crocoblock JetElements For Elementor.This issue affects JetElements For Elementor