Missing Authorization vulnerability in jetmonsters JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configure
The Contest Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 28.
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.2 before 18.3.6, 18.4 before 18.4.4, and 1
The Restrictions for BuddyPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing
The Cryptocurrency Payment Gateway for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of da
The Ultimate Member Widgets for Elementor – WordPress User Directory plugin for WordPress is vulnerable to unauthorized
The Checkbox plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'w
Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Explo
Missing Authorization vulnerability in tychesoftwares Custom Order Numbers for WooCommerce custom-order-numbers-for-wooc
Missing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Configured Access Control S
Missing Authorization vulnerability in wpWax Legal Pages legal-pages allows Exploiting Incorrectly Configured Access Con
Missing Authorization vulnerability in magepeopleteam WpEvently mage-eventpress allows Exploiting Incorrectly Configured
Missing Authorization vulnerability in magepeopleteam WpEvently mage-eventpress allows Exploiting Incorrectly Configured
Missing Authorization vulnerability in Cozy Vision SMS Alert Order Notifications sms-alert allows Exploiting Incorrectly
Missing Authorization vulnerability in ThemeAtelier Chat Help chat-help allows Exploiting Incorrectly Configured Access
Missing Authorization vulnerability in Scott Paterson Subscriptions & Memberships for PayPal subscriptions-memberships-f
Missing Authorization vulnerability in Octolize Shipping Plugins Cart Weight for WooCommerce woo-cart-weight allows Expl
Missing Authorization vulnerability in bPlugins Tiktok Feed b-tiktok-feed allows Exploiting Incorrectly Configured Acces
Missing Authorization vulnerability in ThemeAtelier Better Chat Support for Messenger better-chat-support allows Exploit
Missing Authorization vulnerability in theme funda Show Variations as Single Products Woocommerce woo-show-single-variat
The IDonate – Blood Donation, Request And Donor Management System plugin for WordPress is vulnerable to unauthorized mod
The Appointment Booking Calendar plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and
The Booking Calendar Contact Form plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and
The Autochat Automatic Conversation plugin for WordPress is vulnerable to unauthorized modification of data due to a mis
The Social Images Widget plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabi
The atec Duplicate Page & Post plugin for WordPress is vulnerable to unauthorized post duplication due to missing author
The Ace Post Type Builder plugin for WordPress is vulnerable to unauthorized custom taxonomy deletion due to missing aut
The Chamber Dashboard Business Directory plugin for WordPress is vulnerable to unauthorized data export due to a missing
The Reuters Direct plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability c
The Hide Category by User Role for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versio
The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to unauthorized access due t
Unauthorized access vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attack
The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to u
The CRM Memberships plugin for WordPress is vulnerable to unauthorized membership tag creation due to a missing capabili
The Feedback Modal for Website plugin for WordPress is vulnerable to unauthorized access of data due to a missing capabi
The Voidek Employee Portal plugin for WordPress is vulnerable to unauthorized access due to a missing capability check o
The Payaza plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on
The Projectopia – WordPress Project Management plugin for WordPress is vulnerable to unauthorized modification of data d
The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to missing authorization in versions
The g-FFL Cockpit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includ
The Accessiy By CodeConfig Accessibility plugin for WordPress is vulnerable to unauthorized page creation due to missing
The Helloprint plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.1.2. This
Missing Authorization vulnerability in Hype Hype pico allows Exploiting Incorrectly Configured Access Control Security L
Missing Authorization vulnerability in Bertha AI – Andrew Palmer BERTHA AI bertha-ai-free allows Exploiting Incorrectly
Missing Authorization vulnerability in themerain ThemeRain Core themerain-core allows Exploiting Incorrectly Configured
Missing Authorization vulnerability in Virtuaria Virtuaria PagBank / PagSeguro para Woocommerce virtuaria-pagseguro allo
Missing Authorization vulnerability in ConveyThis ConveyThis conveythis-translate allows Exploiting Incorrectly Configur
Missing Authorization vulnerability in Graham Quick Interest Slider quick-interest-slider allows Exploiting Incorrectly
Missing Authorization vulnerability in mmattax Formstack Online Forms formstack allows Exploiting Incorrectly Configured
Missing Authorization vulnerability in Mario Peshev WP-CRM System wp-crm-system allows Exploiting Incorrectly Configured
Frequently Asked Questions
What is CWE-862?
CWE-862 (Missing Authorization) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-862?
There are 10,347 CVE records associated with CWE-862 in our database. Of these, 472 are critical severity, 2109 are high severity, and 6422 are medium severity.
How can I protect against CWE-862 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-862 using AI-powered security agents.
Detect CWE-862 Vulnerabilities
CyberStrike's AI agents automatically detect missing authorization vulnerabilities across your infrastructure.
Get Started