CWE-862

Missing Authorization vulnerability in WooCommerce WooCommerce Stripe Payment Gateway.This issue affects WooCommerce Str

Missing Authorization vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from

The NI VeriStand Gateway is missing authorization checks when an actor attempts to access File Transfer resources. Thes

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. The hostinfo page has missing/improp

The File Manager Pro – Filester plugin for WordPress is vulnerable to unauthorized modification of data due to a missing

A logic bug in the code which disables kernel tracing for setuid programs meant that tracing was not disabled when it sh

Missing Authorization vulnerability in anhvnit Woocommerce OpenPos allows Accessing Functionality Not Properly Constrain

Missing Authorization vulnerability in WP Swings Wallet System for WooCommerce allows Accessing Functionality Not Proper

Pi-hole before 6 allows unauthenticated admin/api.php?setTempUnit= calls to change the temperature units of the web dash

Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in Ariva Computer Accord ORS allow

D-Link DIR-823G v1.0.2B05_20181207 is vulnerable to Information Disclosure. The device allows unauthorized configuration

Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in Utarit Information SoliClub all

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: OSB Core Functionality). The s

The Download Monitor plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on sev

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.0.0-beta.36, the log path of nginxui is co

In Minecraft mod "Command Block IDE" up to and including version 0.4.9, a missing authorization (CWE-862) allows any use

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to unauthoriz

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15. An app may be able

Missing Authorization vulnerability in PickPlugins Product Designer allows Accessing Functionality Not Properly Constrai

Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo

Missing Authorization vulnerability in MagePeople Team WpTravelly allows Accessing Functionality Not Properly Constraine

A vulnerability was found in Moodle. Insufficient capability checks made it possible to delete badges that a user does n

Missing Authorization vulnerability in aitool Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in On

Incorrect access control in the component content://com.handcent.messaging.provider.MessageProvider/ of Handcent NextSMS

The TI WooCommerce Wishlist plugin for WordPress is vulnerable to unauthorized modification of data due to a missing cap

Missing Authorization vulnerability in brandtoss WP Mailster wp-mailster allows Exploiting Incorrectly Configured Access

WeGIA 3.2.0 before 3998672 does not verify permission to change a password.

Missing Authorization vulnerability in Shopfiles Ltd Ebook Store allows Exploiting Incorrectly Configured Access Control

Missing Authorization vulnerability in Fullworks Quick Paypal Payments allows Exploiting Incorrectly Configured Access C

Missing Authorization vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-mana

The WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses plugin for WordPress

Missing Authorization vulnerability in Video Gallery by Total-Soft Video Gallery – YouTube Gallery allows Exploiting Inc

Missing Authorization vulnerability in Matthew Ruddy Easing Slider allows Exploiting Incorrectly Configured Access Cont

Missing Authorization vulnerability in Webcodin WCP Contact Form allows Exploiting Incorrectly Configured Access Control

Missing Authorization vulnerability in Total-Soft Portfolio Gallery – Responsive Image Gallery allows Exploiting Incorre

Missing Authorization vulnerability in Themeisle Redirection for Contact Form 7 wpcf7-redirect allows Exploiting Incorre

Missing Authorization vulnerability in spreadr Spreadr Woocommerce spreadr-for-woocomerce allows Accessing Functionality

Missing Authorization vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Exploiting Incorrectly Confi

The Popup Builder plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a miss

Missing Authorization vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Exploiting Incorrectly Confi

The Hostinger plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability chec

A vulnerability classified as critical was found in Totolink N350RT 9.3.5u.6265. This vulnerability affects unknown code

The Oliver POS – A WooCommerce Point of Sale (POS) plugin for WordPress is vulnerable to unauthorized access due to miss

The Bulgarisation for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to

The Bulgarisation for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to missing capability ch

The Tutor LMS Pro plugin for WordPress is vulnerable to unauthorized access of data, modification of data, loss of data

The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to unau