Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

CVEs (9,867)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-5121 1Gitlab 1Gitlab Jun 17, 2026 Jun 20, 2025 N/A· v4 9.9 CRITICAL· v3 N/A· v2 An issue has been discovered in GitLab CE/EE affecting all versions from 17.11 before 17.11.4 and 18.0 before 18.0.2. A missing authorization check may have allowed compliance frameworks to be applied to projects outside...Show more An issue has been discovered in GitLab CE/EE affecting all versions from 17.11 before 17.11.4 and 18.0 before 18.0.2. A missing authorization check may have allowed compliance frameworks to be applied to projects outside the compliance framework's group.Show less
CVE-2025-52802 - - Jun 17, 2026 Jun 20, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Missing Authorization vulnerability in enguerranws Import YouTube videos as WP Posts import-youtube-videos-as-wp-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Import YouT...Show more Missing Authorization vulnerability in enguerranws Import YouTube videos as WP Posts import-youtube-videos-as-wp-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Import YouTube videos as WP Posts: from n/a through <= 2.1.Show less
CVE-2025-50034 - - Jun 17, 2026 Jun 20, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in Mahmudul Hasan Arif Enhanced Blocks – Page Builder Blocks for Gutenberg enhanced-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects En...Show more Missing Authorization vulnerability in Mahmudul Hasan Arif Enhanced Blocks – Page Builder Blocks for Gutenberg enhanced-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Enhanced Blocks – Page Builder Blocks for Gutenberg: from n/a through <= 1.4.1.Show less
CVE-2025-50010 - - Jun 17, 2026 Jun 20, 2025 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in Zapier Zapier for WordPress zapier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zapier for WordPress: from n/a through <= 1.5.2.
CVE-2025-50009 - - Jun 17, 2026 Jun 20, 2025 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in Climax Themes Kata Plus kata-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kata Plus: from n/a through <= 1.5.3.
CVE-2025-50008 - - Jun 17, 2026 Jun 20, 2025 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in cscode WooCommerce Manager – Customize and Control Cart page, Add to Cart button, Checkout fields easily innovs-woo-manager allows Exploiting Incorrectly Configured Access Control S...Show more Missing Authorization vulnerability in cscode WooCommerce Manager – Customize and Control Cart page, Add to Cart button, Checkout fields easily innovs-woo-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Manager – Customize and Control Cart page, Add to Cart button, Checkout fields easily: from n/a through <= 1.2.4.5.Show less
CVE-2025-49998 - - Jun 17, 2026 Jun 20, 2025 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in Wetail WooCommerce Fortnox Integration woocommerce-fortnox-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Fortnox...Show more Missing Authorization vulnerability in Wetail WooCommerce Fortnox Integration woocommerce-fortnox-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Fortnox Integration: from n/a through <= 4.5.5.Show less
CVE-2025-49997 - - Jun 17, 2026 Jun 20, 2025 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in Syed Balkhi Giveaways and Contests by RafflePress rafflepress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Giveaways and Contests by RafflePres...Show more Missing Authorization vulnerability in Syed Balkhi Giveaways and Contests by RafflePress rafflepress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Giveaways and Contests by RafflePress: from n/a through <= 1.12.18.Show less
CVE-2025-49996 - - Jun 17, 2026 Jun 20, 2025 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in osama.esh WP Visitor Statistics (Real Time Traffic) wp-stats-manager allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Visitor Statistics (Real T...Show more Missing Authorization vulnerability in osama.esh WP Visitor Statistics (Real Time Traffic) wp-stats-manager allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Visitor Statistics (Real Time Traffic): from n/a through <= 8.4.Show less
CVE-2025-49993 - - Jun 17, 2026 Jun 20, 2025 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in csarturas Cookie-Script.com cookie-script-com allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cookie-Script.com: from n/a through <= 1.2.1...Show more Missing Authorization vulnerability in csarturas Cookie-Script.com cookie-script-com allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cookie-Script.com: from n/a through <= 1.2.1.Show less
CVE-2025-49991 - - Jun 17, 2026 Jun 20, 2025 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in tggfref WP-Recall allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WP-Recall: from n/a through 16.26.14.
CVE-2025-49990 - - Jun 17, 2026 Jun 20, 2025 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in contentstudio Contentstudio contentstudio allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Contentstudio: from n/a through <= 1.3.7.
CVE-2025-49989 - - Jun 17, 2026 Jun 20, 2025 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in App Cheap App Builder app-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects App Builder: from n/a through <= 5.5.6.
CVE-2025-49988 - - Jun 17, 2026 Jun 20, 2025 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in Renzo Johnson Contact Form 7 AWeber Extension integrate-contact-form-7-and-aweber allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact...Show more Missing Authorization vulnerability in Renzo Johnson Contact Form 7 AWeber Extension integrate-contact-form-7-and-aweber allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form 7 AWeber Extension: from n/a through <= 0.1.40.Show less
CVE-2025-49987 - - Jun 17, 2026 Jun 20, 2025 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in WPFactory CRM ERP Business Solution crm-erp-business-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CRM ERP Business Solution: f...Show more Missing Authorization vulnerability in WPFactory CRM ERP Business Solution crm-erp-business-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CRM ERP Business Solution: from n/a through <= 1.13.Show less
CVE-2025-49986 - - Jun 17, 2026 Jun 20, 2025 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in thanhtungtnt Video List Manager video-list-manager allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Video List Manager: from n/a through <= 1.7.
CVE-2025-49982 - - Jun 17, 2026 Jun 20, 2025 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in aguilatechnologies WP Customer Area customer-area allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Customer Area: from n/a through <= 8....Show more Missing Authorization vulnerability in aguilatechnologies WP Customer Area customer-area allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Customer Area: from n/a through <= 8.3.4.Show less
CVE-2025-49981 - - Jun 17, 2026 Jun 20, 2025 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in mahabub81 User Roles and Capabilities user-roles-and-capabilities allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Roles and Capabilit...Show more Missing Authorization vulnerability in mahabub81 User Roles and Capabilities user-roles-and-capabilities allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Roles and Capabilities: from n/a through <= 1.2.6.Show less
CVE-2025-49980 - - Jun 17, 2026 Jun 20, 2025 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in WP Event Manager WP User Profile Avatar wp-user-profile-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Profile Avatar: fro...Show more Missing Authorization vulnerability in WP Event Manager WP User Profile Avatar wp-user-profile-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Profile Avatar: from n/a through <= 1.0.6.Show less
CVE-2025-49979 - - Jun 17, 2026 Jun 20, 2025 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Missing Authorization vulnerability in slui Media Hygiene media-hygiene allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Media Hygiene: from n/a through <= 4.0.1.

Previous 1...231232233...494 Next