CWE-862

Missing Authorization vulnerability in StellarWP WPComplete wpcomplete allows Accessing Functionality Not Properly Const

Missing Authorization vulnerability in CoSchedule CoSchedule coschedule-by-todaymade allows Exploiting Incorrectly Confi

Liferay Portal 7.4.0 through 7.4.3.109, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.7, 7.4 GA

The ZoloBlocks – Gutenberg Block Editor Plugin with Advanced Blocks, Dynamic Content, Templates & Patterns plugin for Wo

The BackWPup – WordPress Backup & Restore Plugin plugin for WordPress is vulnerable to unauthorized access of data due t

The User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds plugin for WordPress is vulnera

The Product Filter by WBW plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capab

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized modification of

The Social Feed Gallery plugin for WordPress is vulnerable to Information Exposure in versions less than, or equal to, 4

Missing Authorization vulnerability in Elliot Sowersby / RelyWP Coupon Affiliates woo-coupon-usage allows Accessing Func

Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Accessing Functi

Missing Authorization vulnerability in Shambhu Patnaik Export Categories export-categories allows Accessing Functionalit

Missing Authorization vulnerability in Mark O'Donnell MSTW CSV EXPORTER mstw-csv-exporter allows Exploiting Incorrectly

Missing Authorization vulnerability in everestthemes Everest Backup everest-backup allows Exploiting Incorrectly Configu

Missing Authorization vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Exploiting Incorre

Missing Authorization vulnerability in Spencer Haws Link Whisper Free link-whisper allows Exploiting Incorrectly Configu

Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Cons

Missing Authorization vulnerability in Joovii Sendle Shipping official-sendle-shipping-method allows Accessing Functiona

Missing Authorization vulnerability in 沃之涛 百度站长SEO合集(支持百度/神马/Bing/头条推送) baiduseo allows Accessing Functionality Not Prop

Missing Authorization vulnerability in Facebook Facebook for WooCommerce facebook-for-woocommerce allows Exploiting Inco

Missing Authorization vulnerability in solwin Blog Designer PRO blog-designer-pro allows Accessing Functionality Not Pro

Missing Authorization vulnerability in WpEstate wpresidence wpresidence allows Exploiting Incorrectly Configured Access

Missing Authorization vulnerability in StylemixThemes Masterstudy Elementor Widgets masterstudy-elementor-widgets allows

The Translate WordPress and go Multilingual – Weglot plugin for WordPress is vulnerable to unauthorized loss of data due

The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to unauthorized access of data due to a missing

The RealPress WordPress plugin before 1.1.0 registers the REST routes without proper permission checks, allowing the cr

The ERI File Library plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check

The Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages plugin for WordPress is vul

Missing Authorization vulnerability in d3wp WP Snow Effect wp-snow-effect allows Accessing Functionality Not Properly Co

The Simple User Capabilities plugin for WordPress is vulnerable to unauthorized modification of data due to a missing ca

The DominoKit plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wp_ajax

The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPres

Missing Authorization vulnerability in Jthemes imEvent imevent allows Accessing Functionality Not Properly Constrained b

Missing Authorization vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking.This issue affects VikB

Missing Authorization vulnerability in hogash KALLYAS kallyas.This issue affects KALLYAS: from n/a through <= 4.22.0.

lakeFS is an open-source tool that transforms object storage into a Git-like repositories. In versions 1.69.0 and below,

kgateway is a Cloud-Native API and AI Gateway. Versions 2.0.4 and below and 2.1.0-agw-cel-rbac through 2.1.0-rc.2 lack a

The Course Booking System plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability

The Shelf Planner plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability ch

The Crypto plugin for WordPress is vulnerable to unauthorized manipulation of data in all versions up to, and including,

The Find Unused Images plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check

The Add Multiple Marker plugin for WordPress is vulnerable to unauthorized modification of data to due to a missing capa

NVIDIA AIStore contains a vulnerability in AuthN where an unauthenticated user may cause information disclosure.  A succ

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an att

The Survey Maker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability che

The Welcart e-Commerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability che

The Survey Maker plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on

Missing Authorization vulnerability in Jeroen Schmit Theater for WordPress theatre allows Exploiting Incorrectly Configu

Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly Configured Access Cont

Missing Authorization vulnerability in YOP YOP Poll yop-poll allows Exploiting Incorrectly Configured Access Control Sec