CWE-862

OpenBMCS 2.4 allows an attacker to escalate privileges from a read user to an admin user by manipulating permissions and

The Postem Ipsum plugin for WordPress is vulnerable to unauthorized modification of data to Privilege Escalation due to

The Demo Importer Plus plugin for WordPress is vulnerable to unauthorized modification of data, loss of data, and privil

The Host PHP Info plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check wh

The linkID plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when incl

Missing Authorization vulnerability in FRESHFACE Fresh Framework fresh-framework allows Accessing Functionality Not Prop

Due to missing authorization of an API endpoint, unauthorized users can send HTTP GET requests to gather sensitive infor

Missing Authorization vulnerability in Md Yeasin Ul Haider URL Shortener exact-links allows Accessing Functionality Not

A Missing Authorization vulnerability in the Juniper Networks Junos Space Security Director allows an unauthenticated ne

Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Accessing Functional

The Document Embedder – Embed PDFs, Word, Excel, and Other Files plugin for WordPress is vulnerable to unauthorized acce

The TAX SERVICE Electronic HDM WordPress plugin before 1.2.1 does not authorization and CSRF checks in an AJAX action, a

The W3 Total Cache plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check o

Missing authorization in Azure Virtual Desktop allows an authorized attacker to elevate privileges over a network.

SAP Business Warehouse and SAP Plug-In Basis allows an authenticated attacker to drop arbitrary SAP database tables, pot

An issue has been discovered in GitLab CE/EE affecting all versions from 17.11 before 17.11.4 and 18.0 before 18.0.2. A

A missing authorization vulnerability in Lexmark Cloud Services badge management allows attacker to reassign badges with

Missing Authorization vulnerability in favethemes Houzez allows Accessing Functionality Not Properly Constrained by ACLs

GitLab has remediated an issue in EE affecting all versions from 17.1 before 18.3.5, 18.4 before 18.4.3, and 18.5 before

In shouldSkipForInitialSUW of AdvancedPowerUsageDetail.java, there is a possible way to bypass factory reset protections

Missing authorization in AMD RomArmor could allow an attacker to bypass ROMArmor protections during system resume from a

Missing Authorization vulnerability in Aldo Latino PrivateContent. This issue affects PrivateContent: from n/a through 8

Missing Authorization vulnerability in fs-code FS Poster fs-poster.This issue affects FS Poster: from n/a through <= 6.5

A vulnerability in the Cisco Industrial Ethernet Switch Device Manager (DM) of Cisco IOS Software could allow an authent

HAX CMS allows you to manage your microsite universe with PHP or NodeJs backends. In versions 11.0.13 and below of haxcm

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Prior to 1.2

Missing Authorization vulnerability in realtyworkstation Realty Workstation realty-workstation allows Accessing Function

Missing authorization in Microsoft Account allows an unauthorized attacker to elevate privileges over a network.

Missing Authorization vulnerability in Black and White BookPress – For Book Authors book-press allows Exploiting Incorre

Missing Authorization vulnerability in shinetheme Traveler traveler.This issue affects Traveler: from n/a through < 3.2.

Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing.This issue affects A

Missing Authorization vulnerability in Bytes Technolab Add Product Frontend for WooCommerce add-product-frontend-for-woo

Missing Authorization vulnerability in Rocket Apps wProject.This issue affects wProject: from n/a before 5.8.0.

Missing Authorization vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Exploiting Incorrectly Configu

Missing Authorization vulnerability in Chimpstudio JobHunt Job Alerts allows Exploiting Incorrectly Configured Access Co

Missing Authorization vulnerability in ZealousWeb Abandoned Contact Form 7 abandoned-contact-form-7 allows Exploiting In

Missing Authorization vulnerability in Dejan Jasnic Trusty Whistleblowing trusty-whistleblowing-solution allows Exploiti

The Cloud SAML SSO plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability c

Missing Authorization vulnerability in AmentoTech Private Limited WPGuppy wpguppy-lite allows Accessing Functionality No

Missing Authorization vulnerability in WP Messiah Ai Image Alt Text Generator for WP ai-image-alt-text-generator-for-wp

An unauthenticated Broken Function Level Authorization (BFLA) vulnerability in Newgen OmniDocs v11.0 allows attackers to

The NitroPack plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check

Incorrect access control in Tenda AC1200 Smart Dual-Band WiFi Router Model AC6 v2.0 Firmware v15.03.06.50 allows attacke

The Live2DWebCanvas plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validati

The ZoxPress - The All-In-One WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of dat

The Click Mag - Viral WordPress News Magazine/Blog Theme theme for WordPress is vulnerable to unauthorized modification

The ConvertPlus plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of ser

A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version 2

A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0

The Affiliate Links: WordPress Plugin for Link Cloaking and Link Management plugin for WordPress is vulnerable to PHP Ob