CWE-862

A vulnerability has been found in mtons mblog up to 3.5.0. Affected by this issue is some unknown functionality. The man

Missing Authorization vulnerability in Drupal Layout Builder Advanced Permissions allows Forceful Browsing.This issue af

The Media Library Assistant plugin for WordPress is vulnerable to arbitrary file deletion in the /wp-content/uploads dir

The ColorMag theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on

Missing Authorization vulnerability in themifyme Themify Builder themify-builder allows Exploiting Incorrectly Configure

Missing Authorization vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Exploiting

Missing Authorization vulnerability in ollybach WPPizza wppizza allows Exploiting Incorrectly Configured Access Control

The Spacious theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on

The Ni WooCommerce Customer Product Report plugin for WordPress is vulnerable to unauthorized modification of data due t

The WP Filter & Combine RSS Feeds plugin for WordPress is vulnerable to unauthorized modification of data due to a missi

The Tourfic plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on

Missing Authorization vulnerability in Xylus Themes WP Bulk Delete wp-bulk-delete allows Exploiting Incorrectly Configur

Missing Authorization vulnerability in Uncanny Owl Uncanny Automator uncanny-automator allows Exploiting Incorrectly Con

Multiple plugins and/or themes for WordPress by LiquidThemes are vulnerable to unauthorized access due to a missing capa

Missing Authorization vulnerability in Basar Ventures AutoWP autowp-ai-content-writer-rewriter allows Exploiting Incorre

A vulnerability has been found in Koillection up to 1.6.18. Affected is an unknown function of the file assets/controlle

The Post SMTP – WP SMTP Plugin with Email Logs and Mobile App for Failure Notifications – Gmail SMTP, Office 365, Brevo,

Missing Authorization vulnerability in Malcure Web Security Malcure Malware Scanner wp-malware-removal allows Exploiting

Missing Authorization vulnerability in themefusecom Brizy brizy allows Exploiting Incorrectly Configured Access Control

Missing Authorization vulnerability in tychesoftwares Order Delivery Date for WooCommerce order-delivery-date-for-woocom

Missing Authorization vulnerability in RadiusTheme Classified Listing classified-listing allows Exploiting Incorrectly C

Missing Authorization vulnerability in FAKTOR VIER F4 Media Taxonomies f4-media-taxonomies allows Exploiting Incorrectly

Missing Authorization vulnerability in yydevelopment Mobile Contact Line mobile-contact-line allows Exploiting Incorrect

The OceanWP WordPress theme before 4.1.2 is vulnerable to an option update due to a missing capability check on one of i

Missing Authorization vulnerability in gutentor Gutentor gutentor allows Exploiting Incorrectly Configured Access Contro

Missing Authorization vulnerability in Payoneer Checkout Payoneer Checkout payoneer-checkout allows Content Spoofing.Thi

Missing Authorization vulnerability in themearile Consultstreet consultstreet allows Exploiting Incorrectly Configured A

Missing Authorization vulnerability in desertthemes SoftMe softme allows Exploiting Incorrectly Configured Access Contro

Missing Authorization vulnerability in priyanshumittal Shk Corporate shk-corporate allows Exploiting Incorrectly Configu

SAP NetWeaver Application Server for ABAP allows authenticated users with access to background processing to gain unauth

Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a th

Missing Authorization vulnerability in Equalize Digital Accessibility Checker by Equalize Digital accessibility-checker

Missing Authorization vulnerability in frenify Categorify categorify allows Exploiting Incorrectly Configured Access Con

The NitroPack plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check

The Maspik plugin for WordPress is vulnerable to Missing Authorization in version 2.5.6 and prior. This is due to missin

The Ultimate Classified Listings plugin for WordPress is vulnerable to unauthorized modification of data due to a missin

The organization selector in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q1.1 through 2024.Q1.12 and 7.

The Blaze Demo Importer plugin for WordPress is vulnerable to unauthorized limited plugin install due to a missing capab

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated user profil

The SureForms – Drag and Drop Contact Form Builder – Multi-step Forms, Conversational Forms and more plugin for WordPres

Missing Authorization vulnerability in Barry Event Rocket allows Exploiting Incorrectly Configured Access Control Securi

Missing Authorization vulnerability in printcart Printcart Web to Print Product Designer for WooCommerce printcart-integ

Missing Authorization vulnerability in Meitar Subresource Integrity (SRI) Manager wp-sri allows Exploiting Incorrectly C

Missing Authorization vulnerability in Codexpert, Inc CoDesigner woolementor allows Exploiting Incorrectly Configured Ac

Missing Authorization vulnerability in Jeremy Saxey Hide WP Toolbar hide-wp-toolbar allows Exploiting Incorrectly Config

Missing Authorization vulnerability in WPFactory Helpdesk Support Ticket System for WooCommerce support-ticket-system-fo

Missing Authorization vulnerability in RadiusTheme Team tlp-team allows Exploiting Incorrectly Configured Access Control

Missing Authorization vulnerability in MantraBrain Ultimate Watermark ultimate-watermark allows Exploiting Incorrectly C

Missing Authorization vulnerability in Detheme DethemeKit For Elementor dethemekit-for-elementor allows Exploiting Incor

Missing Authorization vulnerability in Trustpilot Trustpilot Reviews trustpilot-reviews allows Exploiting Incorrectly Co