CWE-862
8,681 CVEs • Abstraction: Class • Likelihood of Exploit: High
Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
CVEs (8,681)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Unauthenticated Broken Access Control in Flash & HTML5 Video <= 2.11.0 versions. |
Teable's v2 REST API controller lacks @Permissions metadata on ORPC endpoints, allowing any authenticated user to bypass authorization checks. Attackers can read table schemas, create tables, and modify or delete records...Show more |
Unauthenticated Broken Access Control in MailChimp Block <= 1.1.15 versions. |
Unauthenticated Broken Access Control in Subscriptions for WooCommerce <= 1.9.5 versions. |
Contributor Privilege Escalation in Frisbii Pay <= 1.8.2 versions. |
Unauthenticated Broken Access Control in Paymob for WooCommerce <= 4.1.2 versions. |
Unauthenticated Broken Access Control in Stylish Cost Calculator <= 8.3.9 versions. |
Unauthenticated Broken Access Control in Syncee Premium Dropshipping & Wholesale <= 1.0.27 versions. |
Unauthenticated Broken Access Control in Newsletters <= 4.13 versions. |
Unauthenticated Broken Access Control in Intranet & Private Site – All-In-One Intranet <= 1.8.1 versions. |
Unauthenticated Broken Access Control in Five Star Restaurant Menu <= 2.5.2 versions. |
Unauthenticated Broken Access Control in Gutenverse Companion <= 2.5.0 versions. |
Unauthenticated Broken Access Control in User Registration <= 5.2.2 versions. |
Unauthenticated Broken Access Control in SiteGround Email Marketing <= 1.7.5 versions. |
Unauthenticated Broken Access Control in Donation Thermometer <= 2.2.7 versions. |
Contributor Broken Access Control in Live Copy Paste for Elementor <= 1.5.3 versions. |
Subscriber Broken Access Control in Restaurant Menu by MotoPress <= 2.4.11 versions. |
Contributor Broken Access Control in Forget About Shortcode Buttons <= 2.1.3 versions. |
In JetBrains YouTrack before 2026.2.16593 improper access control allowed reading saved queries and tags |
In JetBrains YouTrack before 2026.2.16593 improper authorisation in the app configurations endpoint allowed modifying project settings |