← Back
CWE-862

11,713 CVEs • Abstraction: Class • Likelihood of Exploit: High

Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

JSON object

Loading...

CVEs (11,713)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-22348
-
-
Jun 17, 2026
Jan 22, 2026
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in Tasos Fel Civic Cookie Control civic-cookie-control-8 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Civic Cookie Control: from n/a throu...Show more
Missing Authorization vulnerability in Tasos Fel Civic Cookie Control civic-cookie-control-8 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Civic Cookie Control: from n/a through <= 1.53.Show less
CVE-2025-69315
-
-
Jun 17, 2026
Jan 22, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appoint...Show more
Missing Authorization vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simply Schedule Appointments: from n/a through <= 1.6.9.15.Show less
CVE-2025-69313
-
-
Jun 17, 2026
Jan 22, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PostX: from n/a through <= 5.0.3.
CVE-2025-69311
-
-
Jun 17, 2026
Jan 22, 2026
N/A· v4
7.6 HIGH· v3
N/A· v2
Missing Authorization vulnerability in Broadstreet Broadstreet Ads broadstreet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadstreet Ads: from n/a through <= 1.52.1.
CVE-2025-69300
-
-
Jun 17, 2026
Jan 22, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premium Addons for Elemen...Show more
Missing Authorization vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premium Addons for Elementor: from n/a through <= 4.11.63.Show less
CVE-2025-69193
-
-
Jun 17, 2026
Jan 22, 2026
N/A· v4
7.3 HIGH· v3
N/A· v2
Missing Authorization vulnerability in e-plugins WP Membership wp-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Membership: from n/a through <= 1.6.4.
CVE-2025-69192
-
-
Jun 17, 2026
Jan 22, 2026
N/A· v4
7.3 HIGH· v3
N/A· v2
Missing Authorization vulnerability in e-plugins Real Estate Pro real-estate-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Real Estate Pro: from n/a through <= 2.1.5.
CVE-2025-69191
-
-
Jun 17, 2026
Jan 22, 2026
N/A· v4
7.3 HIGH· v3
N/A· v2
Missing Authorization vulnerability in e-plugins ListingHub listinghub allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ListingHub: from n/a through <= 1.2.7.
CVE-2025-69190
-
-
Jun 17, 2026
Jan 22, 2026
N/A· v4
7.3 HIGH· v3
N/A· v2
Missing Authorization vulnerability in e-plugins Listihub listihub allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Listihub: from n/a through <= 1.0.6.
CVE-2025-69188
-
-
Jun 17, 2026
Jan 22, 2026
N/A· v4
7.3 HIGH· v3
N/A· v2
Missing Authorization vulnerability in e-plugins fitness-trainer fitness-trainer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects fitness-trainer: from n/a through <= 1.7.1.
CVE-2025-69187
-
-
Jun 17, 2026
Jan 22, 2026
N/A· v4
7.3 HIGH· v3
N/A· v2
Missing Authorization vulnerability in e-plugins Final User final-user allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Final User: from n/a through <= 1.2.5.
CVE-2025-69186
-
-
Jun 17, 2026
Jan 22, 2026
N/A· v4
7.3 HIGH· v3
N/A· v2
Missing Authorization vulnerability in e-plugins Hospital Doctor Directory hospital-doctor-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hospital Doctor Directory: f...Show more
Missing Authorization vulnerability in e-plugins Hospital Doctor Directory hospital-doctor-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hospital Doctor Directory: from n/a through <= 1.3.9.Show less
CVE-2025-69185
-
-
Jun 17, 2026
Jan 22, 2026
N/A· v4
7.3 HIGH· v3
N/A· v2
Missing Authorization vulnerability in e-plugins Hotel Listing hotel-listing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hotel Listing: from n/a through <= 1.4.2.
CVE-2025-69184
-
-
Jun 17, 2026
Jan 22, 2026
N/A· v4
7.3 HIGH· v3
N/A· v2
Missing Authorization vulnerability in e-plugins Institutions Directory institutions-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Institutions Directory: from n/a t...Show more
Missing Authorization vulnerability in e-plugins Institutions Directory institutions-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Institutions Directory: from n/a through <= 1.3.4.Show less
CVE-2025-69181
-
-
Jun 17, 2026
Jan 22, 2026
N/A· v4
7.3 HIGH· v3
N/A· v2
Missing Authorization vulnerability in e-plugins Lawyer Directory lawyer-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lawyer Directory: from n/a through <= 1.3.4.
CVE-2025-69095
-
-
Jun 17, 2026
Jan 22, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in designthemes Reservation Plugin dt-reservation-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Reservation Plugin: from n/a through...Show more
Missing Authorization vulnerability in designthemes Reservation Plugin dt-reservation-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Reservation Plugin: from n/a through <= 1.7.Show less
CVE-2025-69052
-
-
Jun 17, 2026
Jan 22, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Missing Authorization vulnerability in FmeAddons Registration & Login with Mobile Phone Number for WooCommerce registration-login-with-mobile-phone-number allows Exploiting Incorrectly Configured Access Control Security...Show more
Missing Authorization vulnerability in FmeAddons Registration & Login with Mobile Phone Number for WooCommerce registration-login-with-mobile-phone-number allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Registration & Login with Mobile Phone Number for WooCommerce: from n/a through <= 1.3.1.Show less
CVE-2025-68911
-
-
Jun 17, 2026
Jan 22, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in solacewp Solace solace allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Solace: from n/a through <= 2.1.16.
CVE-2025-68896
-
-
Jun 17, 2026
Jan 22, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in vrpr WDV One Page Docs wdv-one-page-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WDV One Page Docs: from n/a through <= 1.2.4.
CVE-2025-68882
-
-
Jun 17, 2026
Jan 22, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Missing Authorization vulnerability in Scalenut Scalenut scalenut allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Scalenut: from n/a through <= 1.1.5.