← Back
CWE-862

11,680 CVEs • Abstraction: Class • Likelihood of Exploit: High

Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

JSON object

Loading...

CVEs (11,680)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
-
-
Oct 24, 2026
Jul 23, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Contributor Broken Access Control in Avada Custom Branding <= 1.2 versions.
-
-
Oct 24, 2026
Jul 23, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Unauthenticated Broken Access Control in MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.12 versions.
-
-
Oct 24, 2026
Jul 23, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Unauthenticated Broken Access Control in Manual - Documentation, Knowledge Base & Education WordPress Theme <= 7.5.4 versions.
-
-
Oct 24, 2026
Jul 23, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Unauthenticated Broken Access Control in PeproDev Ultimate Invoice <= 2.2.6 versions.
-
-
Oct 24, 2026
Jul 23, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Unauthenticated Broken Access Control in Dokan Pro <= 5.0.3 versions.
-
-
Oct 24, 2026
Jul 23, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Subscriber Broken Access Control in Query Wrangler <= 1.5.57 versions.
-
-
Sep 30, 2026
Jul 23, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit f...Show more
Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2.Show less
-
-
Oct 24, 2026
Jul 23, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Unauthenticated Broken Access Control in Photography <= 7.7.6 versions.
-
-
Oct 24, 2026
Jul 23, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Unauthenticated Broken Access Control in Event post <= 6.0.1 versions.
-
-
Oct 24, 2026
Jul 23, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Unauthenticated Broken Access Control in Content Control <= 2.6.5 versions.
-
-
Oct 24, 2026
Jul 23, 2026
N/A· v4
6.3 MEDIUM· v3
N/A· v2
Contributor Broken Access Control in Style Kits <= 2.6.5 versions.
-
-
Oct 24, 2026
Jul 23, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Subscriber Broken Access Control in Reviewer <= 3.14.2 versions.
-
-
Oct 24, 2026
Jul 23, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Subscriber Broken Access Control in ListingPro <= 2.9.10 versions.
-
-
Oct 24, 2026
Jul 23, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Unauthenticated Broken Access Control in Civi <= 2.2.4 versions.
-
-
Oct 24, 2026
Jul 23, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Unauthenticated Broken Access Control in Kit (formerly ConvertKit) <= 3.3.5 versions.
-
-
Oct 24, 2026
Jul 23, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Unauthenticated Broken Access Control in AWP Classifieds <= 4.4.7 versions.
-
-
Oct 24, 2026
Jul 23, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Unauthenticated Broken Access Control in JetBooking <= 4.1.2 versions.
-
-
Oct 24, 2026
Jul 23, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Subscriber Broken Access Control in ЮKassa для WooCommerce <= 2.16.1 versions.
-
-
Oct 24, 2026
Jul 23, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions.
-
-
Oct 24, 2026
Jul 23, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions.