CWE-862
11,680 CVEs • Abstraction: Class • Likelihood of Exploit: High
Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
CVEs (11,680)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session |
Subscriber Broken Access Control in ShopLentor Pro <= 2.8.5 versions. |
Unauthenticated Broken Access Control in ShopLentor Pro <= 2.8.5 versions. |
Unauthenticated Broken Access Control in PayU India <= 3.8.9 versions. |
Unauthenticated Broken Access Control in WPDM – Premium Packages <= 6.2.0 versions. |
Unauthenticated Broken Access Control in Payment Gateway for PayPal on WooCommerce <= 9.1.4 versions. |
Subscriber Broken Access Control in WP ERP <= 1.17.5 versions. |
Subscriber Arbitrary Content Deletion in WP EasyPay <= 4.5.0 versions. |
Unauthenticated Broken Access Control in Knit Pay <= 9.6.0.0 versions. |
Subscriber Broken Access Control in Sunshine Photo Cart <= 3.6.10.1 versions. |
Unauthenticated Broken Access Control in Autopay dla WooCommerce <= 2.2.27 versions. |
Subscriber Broken Access Control in WP Booking System < 5.12.8.1 versions. |
Subscriber Broken Access Control in Participants Database <= 2.7.8.4 versions. |
Missing Authorization vulnerability in bPlugins YT Player yt-player allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YT Player: from n/a through 2.1.2. |
Unauthenticated Broken Access Control in WP Fast Total Search <= 1.81.282 versions. |
Unauthenticated Broken Access Control in MarketKing <= 2.1.40 versions. |
Contributor Broken Access Control in uListing <= 2.2.0 versions. |
Subscriber Broken Access Control in uListing <= 2.2.0 versions. |
Booking Agent Broken Access Control in QuickCal - Appointment Booking Calendar for WordPress <= 1.0.16 versions. |
Unauthenticated Broken Access Control in Ditty <= 3.1.66 versions. |