Missing Authorization vulnerability in bPlugins LLC Flash & HTML5 Video allows Exploiting Incorrectly Configured Access
Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Le
Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Le
Missing Authorization vulnerability in Fonts Plugin Fonts allows Exploiting Incorrectly Configured Access Control Securi
Missing Authorization vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster allows Exploiting Incorrectly Config
Missing Authorization vulnerability in Jordy Meow Photo Engine allows Exploiting Incorrectly Configured Access Control S
Missing Authorization vulnerability in Etoile Web Design Order Tracking allows Accessing Functionality Not Properly Cons
Missing Authorization vulnerability in BearDev JoomSport allows Exploiting Incorrectly Configured Access Control Securit
Missing Authorization vulnerability in Envira Gallery Team Envira Photo Gallery allows Exploiting Incorrectly Configured
Broken Access Control vulnerability in Automattic Newspack allows Exploiting Incorrectly Configured Access Control Secur
Missing Authorization vulnerability in Stiofan GetPaid invoicing allows Exploiting Incorrectly Configured Access Control
Missing Authorization vulnerability in AyeCode – WP Business Directory Plugins GeoDirectory allows Exploiting Incorrectl
Missing Authorization vulnerability in Amir Helzer WooCommerce Multilingual & Multicurrency woocommerce-multilingual.Thi
Missing Authorization vulnerability in prasadkirpekar WP Free SSL – Free SSL Certificate for WordPress and force HTTPS w
Missing Authorization vulnerability in beardev JoomSport joomsport-sports-league-results-management.This issue affects J
Missing Authorization vulnerability in HelloAsso HelloAsso helloasso.This issue affects HelloAsso: from n/a through <= 1
Missing Authorization vulnerability in Ads by WPQuads Ads by WPQuads quick-adsense-reloaded.This issue affects Ads by WP
Missing Authorization vulnerability in Magazine3 PWA for WP & AMP pwa-for-wp.This issue affects PWA for WP & AMP: from n
Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials.This issue affects Strong Testim
Missing Authorization vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Exploiting Incorrectly Configured Ac
Missing Authorization vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addons allows Exploiting
The Zotpress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check o
The Tumult Hype Animations plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability
The Debug Tool plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on th
A vulnerability was found in GetSimpleCMS 3.3.16 and classified as problematic. This issue affects some unknown processi
The Buy one click WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capabil
The Buy one click WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing c
The Buy one click WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing c
The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a mis
Jenkins Script Security Plugin 1367.vdf2fc45f229c and earlier, except 1365.1367.va_3b_b_89f8a_95b_ and 1362.1364.v4cf2dc
The Tutor LMS Elementor Addons plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing c
The Music Player for Elementor – Audio Player & Podcast Player plugin for WordPress is vulnerable to unauthorized modifi
An improper access control vulnerability exists in janeczku/calibre-web. The affected version allows users without publi
The Simple Local Avatars plugin for WordPress is vulnerable to unauthorized modification of datadue to a missing capabil
The WP Chat App plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check
The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capabili
A vulnerability was found in Moodle. Users with access to delete audiences from reports could delete audiences from othe
Missing Authorization vulnerability in RexTheme WP VR wpvr allows Exploiting Incorrectly Configured Access Control Secur
Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incor
Missing Authorization vulnerability in boldthemes Bold Page Builder bold-page-builder allows Exploiting Incorrectly Conf
Missing Authorization vulnerability in Binsaifullah Easy Accordion Gutenberg Block easy-accordion-block allows Exploitin
The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes plugin for WordPress is vulner
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi
The Bard Extra plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check
The My Contador lesr plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check
The Ultimate YouTube Video & Shorts Player With Vimeo plugin for WordPress is vulnerable to unauthorized modification of
The Ultimate YouTube Video & Shorts Player With Vimeo plugin for WordPress is vulnerable to unauthorized access of data
The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to unauthorized modification
The WP User Manager – User Profile Builder & Membership plugin for WordPress is vulnerable to unauthorized access of dat
The WPDash Notes plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on
Frequently Asked Questions
What is CWE-862?
CWE-862 (Missing Authorization) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-862?
There are 10,347 CVE records associated with CWE-862 in our database. Of these, 472 are critical severity, 2109 are high severity, and 6422 are medium severity.
How can I protect against CWE-862 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-862 using AI-powered security agents.
Detect CWE-862 Vulnerabilities
CyberStrike's AI agents automatically detect missing authorization vulnerabilities across your infrastructure.
Get Started