Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

CVEs (11,708)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-32487 - - Jun 17, 2026 Mar 13, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in raratheme Lawyer Landing Page lawyer-landing-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lawyer Landing Page: from n/a through <=...Show more Missing Authorization vulnerability in raratheme Lawyer Landing Page lawyer-landing-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lawyer Landing Page: from n/a through <= 1.2.7.Show less
CVE-2026-32486 - - Jun 17, 2026 Mar 13, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in wptravelengine Travel Booking travel-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel Booking: from n/a through <= 1.3.9.
CVE-2026-32461 - - Jun 17, 2026 Mar 13, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in Really Simple Plugins Really Simple SSL really-simple-ssl allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Really Simple SSL: from n/a thro...Show more Missing Authorization vulnerability in Really Simple Plugins Really Simple SSL really-simple-ssl allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Really Simple SSL: from n/a through <= 9.5.7.Show less
CVE-2026-32457 - - Jun 17, 2026 Mar 13, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in Wombat Plugins Advanced Product Fields (Product Addons) for WooCommerce advanced-product-fields-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Leve...Show more Missing Authorization vulnerability in Wombat Plugins Advanced Product Fields (Product Addons) for WooCommerce advanced-product-fields-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Product Fields (Product Addons) for WooCommerce: from n/a through <= 1.6.18.Show less
CVE-2026-32453 - - Jun 17, 2026 Mar 13, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in ThemeFusion Avada Core fusion-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Avada Core: from n/a through < 5.15.0.
CVE-2026-32452 - - Jun 17, 2026 Mar 13, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in ThemeFusion Fusion Builder fusion-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fusion Builder: from n/a through < 3.15.0.
CVE-2026-32451 - - Jun 17, 2026 Mar 13, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in ThemeFusion Fusion Builder fusion-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fusion Builder: from n/a through < 3.15.0.
CVE-2026-32447 - - Jun 17, 2026 Mar 13, 2026 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Atarim: from n/a through <= 4.3.2.
CVE-2026-32446 - - Jun 17, 2026 Mar 13, 2026 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in Syed Balkhi Contact Form by WPForms wpforms-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form by WPForms: from n/a through...Show more Missing Authorization vulnerability in Syed Balkhi Contact Form by WPForms wpforms-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form by WPForms: from n/a through <= 1.9.9.3.Show less
CVE-2026-32445 - - Jun 17, 2026 Mar 13, 2026 N/A· v4 2.7 LOW· v3 N/A· v2 Missing Authorization vulnerability in Elementor Elementor Website Builder elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elementor Website Builder: from n/a through...Show more Missing Authorization vulnerability in Elementor Elementor Website Builder elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elementor Website Builder: from n/a through <= 3.35.5.Show less
CVE-2026-32442 - - Oct 7, 2026 Mar 13, 2026 N/A· v4 5.0 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in E2Pdf e2pdf e2pdf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects e2pdf: from n/a through <= 1.28.15.
CVE-2026-32440 - - Jun 17, 2026 Mar 13, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in Ex-Themes WP Food wp-food allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Food: from n/a through < 2.7.1.
CVE-2026-32439 - - Jun 17, 2026 Mar 13, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in WebGeniusLab BigHearts bighearts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BigHearts: from n/a through <= 3.1.14.
CVE-2026-32438 - - Jun 17, 2026 Mar 13, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in vowelweb VW School Education vw-school-education allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW School Education: from n/a through <=...Show more Missing Authorization vulnerability in vowelweb VW School Education vw-school-education allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW School Education: from n/a through <= 1.4.6.Show less
CVE-2026-32437 - - Jun 17, 2026 Mar 13, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in vowelweb VW Portfolio vw-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW Portfolio: from n/a through <= 1.3.3.
CVE-2026-32436 - - Jun 17, 2026 Mar 13, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in vowelweb VW Photography vw-photography allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW Photography: from n/a through <= 1.3.8.
CVE-2026-32435 - - Jun 17, 2026 Mar 13, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in vowelweb VW Pet Shop vw-pet-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW Pet Shop: from n/a through <= 1.4.7.
CVE-2026-32434 - - Jun 17, 2026 Mar 13, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in vowelweb VW Fitness vw-fitness allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW Fitness: from n/a through <= 4.3.4.
CVE-2026-32432 - - Jun 17, 2026 Mar 13, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time Slots Booking For...Show more Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time Slots Booking Form: from n/a through <= 1.2.42.Show less
CVE-2026-32428 - - Jun 17, 2026 Mar 13, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in Ays Pro Popup Like box ays-facebook-popup-likebox allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup Like box: from n/a through <= 3.7....Show more Missing Authorization vulnerability in Ays Pro Popup Like box ays-facebook-popup-likebox allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup Like box: from n/a through <= 3.7.7.Show less

Previous 1...221222223...586 Next