CWE-862
9,590 CVEs • Abstraction: Class • Likelihood of Exploit: High
Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
CVEs (9,590)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Unauthenticated Broken Access Control in WP Event SOlution <= 4.1.8 versions. |
Unauthenticated Broken Access Control in Royal MCP <= 1.4.2 versions. |
Unauthenticated Broken Access Control in Booking Package <= 1.7.06 versions. |
Subscriber Broken Access Control in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.9 versions. |
Unauthenticated Broken Access Control in Tutor LMS <= 3.9.7 versions. |
Unauthenticated Broken Access Control in Redsys for WooCommerce Light <= 7.0.0 versions. |
Subscriber Broken Access Control in Ultra Addons for WPForms <= 1.0.11 versions. |
Subscriber Broken Access Control in RepairBuddy <= 4.1132 versions. |
Unauthenticated Broken Access Control in WP Directory Kit <= 1.5.0 versions. |
Unauthenticated Broken Access Control in AWP Classifieds <= 4.4.4 versions. |
Unauthenticated Broken Access Control in Booking Activities <= 1.16.48.1 versions. |
Unauthenticated Broken Access Control in Masteriyo - LMS <= 2.1.5 versions. |
Subscriber Broken Access Control in Motors < 1.4.107 versions. |
Unauthenticated Broken Access Control in Easy Appointments <= 3.12.21 versions. |
Unauthenticated Broken Access Control in Easy Digital Downloads <= 3.6.5 versions. |
Unauthenticated Broken Access Control in Event Tickets Manager for WooCommerce <= 1.5.3 versions. |
Subscriber Broken Access Control in Rank Math SEO <= 1.0.271 versions. |
Unauthenticated Broken Access Control in Simple Membership <= 4.7.1 versions. |
Unauthenticated Broken Access Control in Essential Addons for Elementor < 6.6.0 versions. |
Unauthenticated Broken Access Control in User Registration <= 5.1.2 versions. |