Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

CVEs (11,708)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-27331 - - Jul 24, 2026 May 26, 2026 N/A· v4 6.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in Magepeople inc. WpTravelly allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WpTravelly: from n/a through 2.1.5.
CVE-2026-25444 - - Jul 24, 2026 May 26, 2026 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in Magepeople inc. WpBookingly allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WpBookingly: from n/a through 1.2.9.
CVE-2026-25426 - - Jul 24, 2026 May 26, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Taxi Booking Manager for WooCommerc...Show more Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Taxi Booking Manager for WooCommerce: from n/a through 2.0.1.Show less
CVE-2026-24520 - - Jul 24, 2026 May 26, 2026 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in bPlugins Tiktok Feed allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Tiktok Feed: from n/a through 1.0.24.
CVE-2026-24190 1Nvidia 1Gpu Display Driver Jul 24, 2026 May 26, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause improper access to GPU resources. A successful exploit of this vulnerability might lead to denial of...Show more NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause improper access to GPU resources. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.Show less
CVE-2026-47728 - - Jul 24, 2026 May 26, 2026 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, Bugsink resolved sourcemaps and debug files by debug ID without scoping that lookup to the project that owned the uploaded metadata. An authenticated user wit...Show more Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, Bugsink resolved sourcemaps and debug files by debug ID without scoping that lookup to the project that owned the uploaded metadata. An authenticated user with access to one project could cause event processing in that project to use sourcemap/debug-file metadata uploaded for another project in the same Bugsink instance, if the same debug ID was referenced. This vulnerability is fixed in 2.2.0.Show less
CVE-2026-24638 - - Jul 24, 2026 May 26, 2026 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in Webful Creations RepairBuddy allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects RepairBuddy: from n/a through 4.1121.
CVE-2026-24590 - - Jul 24, 2026 May 26, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in VideoWhisper.Com Paid Videochat Turnkey Site allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Paid Videochat Turnkey Site: from n/a throu...Show more Missing Authorization vulnerability in VideoWhisper.Com Paid Videochat Turnkey Site allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Paid Videochat Turnkey Site: from n/a through 7.3.23.Show less
CVE-2026-39655 - - Jul 24, 2026 May 26, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in TeconceTheme Mayosis Core allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Mayosis Core: from n/a through 5.4.7.
CVE-2026-4795 - - Jul 24, 2026 May 26, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 A missing authorization vulnerability in Zyxel GS1200-5v3 firmware versions through 1.00(ACPS.2)C0, GS1200-8v3 firmware versions through 1.00(ACPT.2)C0, GS1200-5HPv3 firmware versions through 1.00(ACPU.2)C0, GS1200-8HPv...Show more A missing authorization vulnerability in Zyxel GS1200-5v3 firmware versions through 1.00(ACPS.2)C0, GS1200-8v3 firmware versions through 1.00(ACPT.2)C0, GS1200-5HPv3 firmware versions through 1.00(ACPU.2)C0, GS1200-8HPv3 firmware versions through 1.00(ACPV.2)C0, and GS1200-10v3 firmware versions through 1.00(ACPW.2)C0 could allow a LAN-based, unauthenticated attacker to read the system configuration from a log file via a crafted HTTP request.Show less
CVE-2026-45438 - - Jul 24, 2026 May 25, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Missing Authorization vulnerability in WebToffee Smart Coupons for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Smart Coupons for WooCommerce: from n/a before 2...Show more Missing Authorization vulnerability in WebToffee Smart Coupons for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Smart Coupons for WooCommerce: from n/a before 2.3.0.Show less
CVE-2026-45209 - - Jul 24, 2026 May 25, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Missing Authorization vulnerability in edward_plainview MyCryptoCheckout allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MyCryptoCheckout: from n/a through 2.161.
CVE-2026-42776 - - Jul 24, 2026 May 25, 2026 N/A· v4 6.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Sunshine Photo Cart: from n/a through 3.6.7.
CVE-2026-42763 - - Jul 20, 2026 May 25, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in SePay team SePay Gateway allows Retrieve Embedded Sensitive Data. This issue affects SePay Gateway: from n/a through 1.1.20.
CVE-2026-32389 - - Jul 24, 2026 May 25, 2026 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in Linethemes NanoCare allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects NanoCare: from n/a before 1.2.2.
CVE-2026-27398 - - Jul 20, 2026 May 25, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in WP Chill RSVP and Event Management allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects RSVP and Event Management: from n/a through 2.7.16.
CVE-2026-27357 - - Jul 24, 2026 May 25, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in Cornel Raiu WP Search Analytics allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Search Analytics: from n/a before 1.5.0.
CVE-2026-27346 - - Jul 24, 2026 May 25, 2026 N/A· v4 4.9 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in Kings Plugins B2BKing allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects B2BKing: from n/a before 5.2.10.
CVE-2026-24592 - - Jul 24, 2026 May 25, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in Lucian Apostol Auto Affiliate Links allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Auto Affiliate Links: from n/a through 6.8.8.3.
CVE-2026-24586 - - Jul 24, 2026 May 25, 2026 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in Themeansar Newses allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Newses: from n/a through 2.0.0.77.

Previous 1...189190191...586 Next