CWE-862

In aee, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of

A vulnerability in Cisco NX-OS Software could allow an authenticated, local attacker with privileges to access the Bash

A missing authorization check vulnerability exists in GitLab Remote Development affecting all versions prior to 16.5.6,

The WP-Members Membership Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up

The vulnerability allows an unauthenticated remote attacker to upload arbitrary files under the context of the applicati

The EventON - WordPress Virtual Event Calendar Plugin plugin for WordPress is vulnerable to unauthorized modification of

The CAOS | Host Google Analytics Locally plugin for WordPress is vulnerable to unauthorized modification of data due to

The GTG Product Feed for Shopping plugin for WordPress is vulnerable to unauthorized modification of data due to a missi

When access to the "admin" folder is not protected by some external authorization mechanisms e.g. Apache Basic Auth, it

The Estatik Real Estate Plugin WordPress plugin before 4.1.1 does not prevent user with low privileges on the site, like

Missing Authorization vulnerability in Vagary Digital HREFLANG Tags Lite.This issue affects HREFLANG Tags Lite: from n/a

The ColorMag theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the plugin_ac

Apache Airflow, versions before 2.8.1, have a vulnerability that allows an authenticated user to access the source code

The 10Web AI Assistant – AI content writing assistant plugin for WordPress is vulnerable to unauthorized modification of

Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore. Prior to version 1.3.3, an attacker can cr

In Zimbra Collaboration (ZCS) 8.8.15 and 9.0, a closed account (with 2FA and generated passwords) can send e-mail messag

The Plugin Groups plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability ch

The Redirects plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check

The Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan plugin for WordPress is v

The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to unauthorized loss of data due to a missi

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is

The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to unauthorized access due to a missing capa

The Page Builder Sandwich – Front End WordPress Page Builder Plugin plugin for WordPress is vulnerable to unauthorized m

The Page Builder Sandwich – Front End WordPress Page Builder Plugin plugin for WordPress is vulnerable to Sensitive Info

In JetBrains YouTrack before 2024.1.25893 attaching/detaching workflow to a project was possible without project admin p

The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized modification o

The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to unauthorized modification of data

The Error Log Viewer by BestWebSoft WordPress plugin before 1.1.3 is affected by a Directory Listing issue, allowing use

Missing Authorization vulnerability in Save as PDF plugin by Pdfcrowd Word Replacer Pro.This issue affects Word Replacer

Missing Authorization vulnerability in ThemeHunk Advance WordPress Search Plugin.This issue affects Advance WordPress Se

Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce.This issue affects Points and Reward

Missing Authorization vulnerability in WooCommerce WooCommerce Box Office.This issue affects WooCommerce Box Office: fro

Missing Authorization vulnerability in SNP Digital SalesKing.This issue affects SalesKing: from n/a through 1.6.15.

Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73.

Missing Authorization vulnerability in Wholesale Team WholesaleX.This issue affects WholesaleX: from n/a through 1.3.1.

Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a th

Missing Authorization vulnerability in ThimPress WP Hotel Booking.This issue affects WP Hotel Booking: from n/a through

The Product Sort and Display for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due

SAP Group Reporting Data Collection does not perform necessary authorization checks for an authenticated user, resulting

Missing Authorization vulnerability in PenciDesign Soledad.This issue affects Soledad: from n/a through 8.4.2.

The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized a

Missing Authorization vulnerability in WPcloudgallery WordPress Gallery Exporter.This issue affects WordPress Gallery Ex

Missing Authorization vulnerability in YITH YITH WooCommerce Gift Cards Premium.This issue affects YITH WooCommerce Gift

Missing Authorization vulnerability in Loopus WP Cost Estimation & Payment Forms Builder.This issue affects WP Cost Esti

Missing Authorization vulnerability in Layered If Menu.This issue affects If Menu: from n/a through 0.16.3.

Missing Authorization vulnerability in Long Watch Studio MyRewards.This issue affects MyRewards: from n/a through 5.3.0.

Missing Authorization vulnerability in BloomPixel Max Addons Pro for Bricks.This issue affects Max Addons Pro for Bricks

Missing Authorization vulnerability in Xfinity Soft Order Limit for WooCommerce.This issue affects Order Limit for WooCo

An issue was discovered in Zammad before 6.3.0. An authenticated agent could perform a remote Denial of Service attack b

Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.5.