Cash Management in SAP S/4 HANA does not perform necessary authorization checks for an authenticated user, resulting in
The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Missing Authorization in all versions u
The Happy Addons for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to insufficient aut
The 360 Javascript Viewer plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capab
The MasterStudy LMS plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check
The Video Conferencing with Zoom plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up
The Advanced Classifieds & Directory Pro plugin for WordPress is vulnerable to unauthorized loss of data due to a missin
The Permalink Manager Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability
Missing Authorization vulnerability in junkcoder, ristoniinemets AJAX Thumbnail Rebuild.This issue affects AJAX Thumbnai
Missing Authorization vulnerability in BdThemes Prime Slider – Addons For Elementor.This issue affects Prime Slider – Ad
Missing Authorization vulnerability in JoomUnited WP Media folder.This issue affects WP Media folder: from n/a through 5
Missing Authorization vulnerability in Metagauss RegistrationMagic.This issue affects RegistrationMagic: from n/a throug
Missing Authorization vulnerability in WooCommerce WooCommerce Shipping Per Product.This issue affects WooCommerce Shipp
The WPZOOM Social Feed Widget & Block plugin for WordPress is vulnerable to unauthorized access due to a missing capabil
Missing Authorization vulnerability in supsystic Popup by Supsystic popup-by-supsystic.This issue affects Popup by Supsy
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized email sending due to a missing c
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing
Missing Authorization vulnerability in Very Good Plugins Fatal Error Notify.This issue affects Fatal Error Notify: from
Missing Authorization vulnerability in Palscode Multi Currency For WooCommerce.This issue affects Multi Currency For Woo
Missing Authorization vulnerability in WooCommerce & WordPress Tutorials Custom Thank You Page Customize For WooCommerce
Missing Authorization vulnerability in GutenGeek GG Woo Feed for WooCommerce.This issue affects GG Woo Feed for WooComme
Missing Authorization vulnerability in WPClever WPC Grouped Product for WooCommerce.This issue affects WPC Grouped Produ
Missing Authorization vulnerability in Jaed Mosharraf & Pluginbazar Team Open Close WooCommerce Store.This issue affects
Missing Authorization vulnerability in Nuggethon Custom Order Statuses for WooCommerce.This issue affects Custom Order S
Missing Authorization vulnerability in Theme My Login.This issue affects Theme My Login: from n/a through 7.1.6.
Missing Authorization vulnerability in GenialSouls WP Social Comments.This issue affects WP Social Comments: from n/a th
Missing Authorization vulnerability in BdThemes Prime Slider – Addons For Elementor.This issue affects Prime Slider – Ad
Missing Authorization vulnerability in WPClever WPC Frequently Bought Together for WooCommerce.This issue affects WPC Fr
The Quick Featured Images plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capab
The Elespare – Build Your Blog, News & Magazine Websites with Expert-Designed Template Kits. One Click Import: No Coding
Missing Authorization vulnerability in Ovic Team Ovic Addon Toolkit.This issue affects Ovic Addon Toolkit: from n/a thro
The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized l
Missing Authorization vulnerability in MonsterInsights Google Analytics by Monster Insights.This issue affects Google An
Missing Authorization vulnerability in Octolize Flexible Shipping.This issue affects Flexible Shipping: from n/a through
Missing Authorization vulnerability in Supsystic Data Tables Generator by Supsystic.This issue affects Data Tables Gener
Missing Authorization vulnerability in impleCode Reviews Plus.This issue affects Reviews Plus: from n/a through 1.3.4.
Missing Authorization vulnerability in Extend Themes Pathway, Extend Themes Hugo WP, Extend Themes Althea WP, Extend The
Missing Authorization vulnerability in RedNao Smart Forms.This issue affects Smart Forms: from n/a through 2.6.91.
Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor.This issue affects Master Addons for Elem
Missing Authorization vulnerability in Tyche Softwares Payment Gateway Based Fees and Discounts for WooCommerce.This iss
The ACF Front End Editor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabi
The WP Show Posts plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on
The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +10 Modules – All in One Solution (formerly WooLentor) pl
The Admin Bar Remover plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabilit
The ACF On-The-Go plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability ch
The Different Menu in Different Pages – Control Menu Visibility (All in One) plugin for WordPress is vulnerable to unaut
The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to unauthorized modification of data due t
The eRoom – Zoom Meetings & Webinars plugin for WordPress is vulnerable to Sensitive Information Exposure in all version
The Country State City Dropdown CF7 plugin for WordPress is vulnerable to unauthorized modification of data due to a mis
The WordPress Backup & Migration plugin for WordPress is vulnerable to unauthorized access of data due to a missing capa
Frequently Asked Questions
What is CWE-862?
CWE-862 (Missing Authorization) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-862?
There are 10,347 CVE records associated with CWE-862 in our database. Of these, 472 are critical severity, 2109 are high severity, and 6422 are medium severity.
How can I protect against CWE-862 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-862 using AI-powered security agents.
Detect CWE-862 Vulnerabilities
CyberStrike's AI agents automatically detect missing authorization vulnerabilities across your infrastructure.
Get Started