← Back
CWE-862

11,547 CVEs • Abstraction: Class • Likelihood of Exploit: High

Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

JSON object

Loading...

CVEs (11,547)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
-
-
Oct 24, 2026
Aug 13, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Unauthenticated Broken Access Control in Revolut Gateway for WooCommerce < 4.22.10 versions.
-
-
Oct 23, 2026
Aug 13, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions.
-
-
Oct 24, 2026
Aug 13, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Subscriber Broken Access Control in Motors <= 1.4.113 versions.
-
-
Oct 24, 2026
Aug 13, 2026
N/A· v4
6.3 MEDIUM· v3
N/A· v2
Unauthenticated Broken Access Control in Anti Spam and list cleaner &#8211; AcyChecker <= 2.0.0 versions.
-
-
Oct 24, 2026
Aug 13, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Unauthenticated Broken Access Control in Contact Form 7 – PayPal & Stripe Add-on <= 2.5.1 versions.
-
-
Oct 24, 2026
Aug 13, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Unauthenticated Broken Access Control in Arvow AI SEO Writer <= 1.5.3 versions.
-
-
Oct 24, 2026
Aug 13, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Unauthenticated Broken Access Control in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.1.1 versions.
-
-
Oct 24, 2026
Aug 13, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Unauthenticated Broken Access Control in Internal Link Optimiser <= 5.2.7 versions.
-
-
Aug 14, 2026
Aug 13, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Unauthenticated Broken Access Control in SMEPay: UPI Gateway for WooCommerce <= 1.0.5 versions.
-
-
Aug 14, 2026
Aug 13, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Unauthenticated Broken Access Control in AI for SEO <= 2.4.2 versions.
-
-
Aug 14, 2026
Aug 13, 2026
N/A· v4
6.0 MEDIUM· v3
N/A· v2
Subscriber Broken Access Control in ReactPress <= 3.4.0 versions.
-
-
Aug 14, 2026
Aug 13, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Unauthenticated Broken Access Control in WP Social Avatar <= 1.5 versions.
-
-
Oct 24, 2026
Aug 13, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Unauthenticated Broken Access Control in MultiVendorX <= 5.0.10 versions.
-
-
Oct 24, 2026
Aug 13, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Unauthenticated Broken Access Control in Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) <= 1.0.7 versions.
-
-
Oct 24, 2026
Aug 13, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Unauthenticated Broken Access Control in WPMobile.App <= 11.77 versions.
-
-
Oct 24, 2026
Aug 13, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Unauthenticated Broken Access Control in Secure Card Gateway for ePay Paycenter (Piraeus Bank) <= 1.0.32 versions.
-
-
Oct 23, 2026
Aug 13, 2026
N/A· v4
7.3 HIGH· v3
N/A· v2
Unauthenticated Broken Access Control in Hydra Booking <= 1.2.2 versions.
-
-
Oct 23, 2026
Aug 13, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Subscriber Broken Access Control in Travelfic Toolkit <= 1.5.1 versions.
-
-
Oct 23, 2026
Aug 13, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Subscriber Broken Access Control in AcyMailing SMTP Newsletter <= 10.11.1 versions.
-
-
Oct 23, 2026
Aug 13, 2026
N/A· v4
7.1 HIGH· v3
N/A· v2
Customer Arbitrary Content Deletion in WP Event SOlution <= 4.1.19 versions.