Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

CVEs (9,633)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-39701 - - Jul 24, 2026 Apr 8, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in Andrew ShopWP wpshopify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShopWP: from n/a through <= 5.2.4.
CVE-2026-39700 - - Jul 24, 2026 Apr 8, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in WPXPO WowOptin optin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WowOptin: from n/a through <= 1.4.32.
CVE-2026-39699 - - Jul 24, 2026 Apr 8, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in massiveshift AI Workflow Automation ai-workflow-automation-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Workflow Automation: fr...Show more Missing Authorization vulnerability in massiveshift AI Workflow Automation ai-workflow-automation-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Workflow Automation: from n/a through <= 1.4.2.Show less
CVE-2026-39698 - - Jul 24, 2026 Apr 8, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in PublisherDesk The Publisher Desk ads.txt the-publisher-desk-ads-txt allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Publisher Desk ads...Show more Missing Authorization vulnerability in PublisherDesk The Publisher Desk ads.txt the-publisher-desk-ads-txt allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Publisher Desk ads.txt: from n/a through <= 1.5.0.Show less
CVE-2026-39697 - - Jul 24, 2026 Apr 8, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in HBSS Technologies MAIO – The new AI GEO / SEO tool maio-the-new-ai-geo-seo-tool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MAIO – The...Show more Missing Authorization vulnerability in HBSS Technologies MAIO – The new AI GEO / SEO tool maio-the-new-ai-geo-seo-tool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MAIO – The new AI GEO / SEO tool: from n/a through <= 6.2.8.Show less
CVE-2026-39694 - - Jul 24, 2026 Apr 8, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appoint...Show more Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through <= 1.6.10.2.Show less
CVE-2026-39691 - - Jul 24, 2026 Apr 8, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in AdAstraCrypto Cryptocurrency Donation Box – Bitcoin & Crypto Donations cryptocurrency-donation-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue...Show more Missing Authorization vulnerability in AdAstraCrypto Cryptocurrency Donation Box – Bitcoin & Crypto Donations cryptocurrency-donation-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cryptocurrency Donation Box – Bitcoin & Crypto Donations: from n/a through <= 2.2.13.Show less
CVE-2026-39690 - - Jul 24, 2026 Apr 8, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in Paul Bearne Author Avatars List/Block author-avatars allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Author Avatars List/Block: from n/a t...Show more Missing Authorization vulnerability in Paul Bearne Author Avatars List/Block author-avatars allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Author Avatars List/Block: from n/a through <= 2.1.25.Show less
CVE-2026-39689 - - Jul 24, 2026 Apr 8, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in eshipper eShipper Commerce eshipper-commerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eShipper Commerce: from n/a through <= 2.16.1...Show more Missing Authorization vulnerability in eshipper eShipper Commerce eshipper-commerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eShipper Commerce: from n/a through <= 2.16.12.Show less
CVE-2026-39688 - - Jul 24, 2026 Apr 8, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in Glowlogix WP Frontend Profile wp-front-end-profile allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Frontend Profile: from n/a through <...Show more Missing Authorization vulnerability in Glowlogix WP Frontend Profile wp-front-end-profile allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Frontend Profile: from n/a through <= 1.3.9.Show less
CVE-2026-39687 - - Jul 24, 2026 Apr 8, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in Rapid Car Check Rapid Car Check Vehicle Data free-vehicle-data-uk allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rapid Car Check Vehicle...Show more Missing Authorization vulnerability in Rapid Car Check Rapid Car Check Vehicle Data free-vehicle-data-uk allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rapid Car Check Vehicle Data: from n/a through <= 2.0.Show less
CVE-2026-39685 - - Jul 24, 2026 Apr 8, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in lvaudore The Moneytizer the-moneytizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Moneytizer: from n/a through <= 10.0.10.
CVE-2026-39682 - - Jul 24, 2026 Apr 8, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in Arjan Pronk linkPizza-Manager linkpizza-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects linkPizza-Manager: from n/a through <= 5.5...Show more Missing Authorization vulnerability in Arjan Pronk linkPizza-Manager linkpizza-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects linkPizza-Manager: from n/a through <= 5.5.5.Show less
CVE-2026-39680 - - Jul 24, 2026 Apr 8, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in MWP Development Diet Calorie Calculator diet-calorie-calculator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Diet Calorie Calculator: f...Show more Missing Authorization vulnerability in MWP Development Diet Calorie Calculator diet-calorie-calculator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Diet Calorie Calculator: from n/a through <= 1.1.1.Show less
CVE-2026-39678 - - Jul 24, 2026 Apr 8, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in DOTonPAPER Pinpoint Booking System booking-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pinpoint Booking System: from n/a throug...Show more Missing Authorization vulnerability in DOTonPAPER Pinpoint Booking System booking-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pinpoint Booking System: from n/a through <= 2.9.9.6.5.Show less
CVE-2026-39676 - - Jul 20, 2026 Apr 8, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in Shahjada Download Manager download-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download Manager: from n/a through <= 3.3.52.
CVE-2026-39675 - - Jul 24, 2026 Apr 8, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in webmuehle Court Reservation court-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Court Reservation: from n/a through <= 1.10....Show more Missing Authorization vulnerability in webmuehle Court Reservation court-reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Court Reservation: from n/a through <= 1.10.11.Show less
CVE-2026-39673 - - Jul 24, 2026 Apr 8, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in shrikantkale iZooto izooto-web-push allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects iZooto: from n/a through <= 3.7.20.
CVE-2026-39672 - - Jul 24, 2026 Apr 8, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in shiptime ShipTime: Discounted Shipping Rates shiptime-discount-shipping allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShipTime: Discount...Show more Missing Authorization vulnerability in shiptime ShipTime: Discounted Shipping Rates shiptime-discount-shipping allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShipTime: Discounted Shipping Rates: from n/a through <= 1.1.1.Show less
CVE-2026-39669 - - Jul 24, 2026 Apr 8, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in NitroPack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects NitroPack: from n/a through 1.19.3.

Previous 1...103104105...482 Next