← Back
CWE-862

8,736 CVEs • Abstraction: Class • Likelihood of Exploit: High

Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

JSON object

Loading...

CVEs (8,736)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-37176
1Sap
1Bw/4hana
Jun 17, 2026
Jun 11, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
SAP BW/4HANA Transformation and Data Transfer Process (DTP) allows an authenticated attacker to gain higher access levels than they should have by exploiting improper authorization checks. This results in escalation of p...Show more
SAP BW/4HANA Transformation and Data Transfer Process (DTP) allows an authenticated attacker to gain higher access levels than they should have by exploiting improper authorization checks. This results in escalation of privileges. It has no impact on the confidentiality of data but may have low impacts on the integrity and availability of the application.Show less
CVE-2024-34691
1Sap
1S/4 Hana
Jun 17, 2026
Jun 11, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Manage Incoming Payment Files (F1680) of SAP S/4HANA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. As a result, it has high impact on integrity and no i...Show more
Manage Incoming Payment Files (F1680) of SAP S/4HANA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. As a result, it has high impact on integrity and no impact on the confidentiality and availability of the system.Show less
CVE-2024-34690
1Sap
1Student Life Cycle Management
Jun 17, 2026
Jun 11, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
SAP Student Life Cycle Management (SLcM) fails to conduct proper authorization checks for authenticated users, leading to the potential escalation of privileges. On successful exploitation it could allow an attacker to a...Show more
SAP Student Life Cycle Management (SLcM) fails to conduct proper authorization checks for authenticated users, leading to the potential escalation of privileges. On successful exploitation it could allow an attacker to access and edit non-sensitive report variants that are typically restricted, causing minimal impact on the confidentiality and integrity of the application.Show less
CVE-2023-6748
1Wpgogo
1Custom Field Template
Jun 17, 2026
Jun 11, 2024
N/A· v4
4.3 MEDIUM· v3
N/A· v2
The Custom Field Template plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.1 via the 'cft' shortcode. This makes it possible for authenticated attackers with...Show more
The Custom Field Template plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.1 via the 'cft' shortcode. This makes it possible for authenticated attackers with contributor access and above, to extract sensitive data including arbitrary post metadata.Show less
CVE-2024-34800
-
-
Jun 17, 2026
Jun 10, 2024
N/A· v4
7.6 HIGH· v3
N/A· v2
Missing Authorization vulnerability in Crafthemes Crafthemes Demo Import crafthemes-demo-import allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Crafthemes Demo Import: from n/a...Show more
Missing Authorization vulnerability in Crafthemes Crafthemes Demo Import crafthemes-demo-import allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Crafthemes Demo Import: from n/a through <= 3.3.Show less
CVE-2024-4746
1Netgsm
1Netgsm
Jun 17, 2026
Jun 10, 2024
N/A· v4
6.3 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in netgsm Netgsm netgsm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Netgsm: from n/a through <= 2.9.32.
CVE-2024-4745
1Seedprod
1Rafflepress
Jun 17, 2026
Jun 10, 2024
N/A· v4
6.3 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in RafflePress Giveaways and Contests by RafflePress.This issue affects Giveaways and Contests by RafflePress: from n/a through 1.12.4.
CVE-2024-4744
1Ipages Flipbook Project
1Ipages Flipbook
Jun 17, 2026
Jun 10, 2024
N/A· v4
7.3 HIGH· v3
N/A· v2
Missing Authorization vulnerability in Avirtum iPages Flipbook.This issue affects iPages Flipbook: from n/a through 1.5.1.
CVE-2024-35742
1Codeparrots
1Easy Forms For Mailchimp
Jun 17, 2026
Jun 10, 2024
N/A· v4
7.3 HIGH· v3
N/A· v2
Missing Authorization vulnerability in Code Parrots Easy Forms for Mailchimp.This issue affects Easy Forms for Mailchimp: from n/a through 6.9.0.
CVE-2024-35741
1Getawesomesupport
1Awesome Support
Jun 17, 2026
Jun 10, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Missing Authorization vulnerability in Awesome Support Team Awesome Support.This issue affects Awesome Support: from n/a through 6.1.7.
CVE-2024-35735
1Codepeople
1Wp Time Slots Booking Form
Jun 17, 2026
Jun 10, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11.
CVE-2024-35729
1Tickera
1Tickera
Jun 17, 2026
Jun 10, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Missing Authorization vulnerability in Tickera Tickera tickera-event-ticketing-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tickera: from n/a through <= 3.5.2.6.
CVE-2024-35727
1Actpro
1Extra Product Options For Woocommerce
Jun 17, 2026
Jun 10, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Missing Authorization vulnerability in actpro Extra Product Options for WooCommerce.This issue affects Extra Product Options for WooCommerce: from n/a through 3.0.6.
CVE-2024-35726
1Themekraft
1Buddypress Woocommerce My Account Integration. Create Woocommerce Member Pages
Jun 17, 2026
Jun 10, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Missing Authorization vulnerability in ThemeKraft WooBuddy.This issue affects WooBuddy: from n/a through 3.4.19.
CVE-2024-35725
1La Studioweb
1Element Kit For Elementor
Jun 17, 2026
Jun 10, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.3.6.
CVE-2024-35724
1Bosathemes
1Bosa Elementor Addons And Templates For Woocommerce
Jun 17, 2026
Jun 10, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Missing Authorization vulnerability in Bosa Themes Bosa Elementor Addons and Templates for WooCommerce.This issue affects Bosa Elementor Addons and Templates for WooCommerce: from n/a through 1.0.12.
CVE-2024-35723
1Arwebdesign
1Dashboard To Do List
Jun 17, 2026
Jun 10, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Missing Authorization vulnerability in Andrew Dashboard To-Do List dashboard-to-do-list.This issue affects Dashboard To-Do List: from n/a through <= 1.2.0.
CVE-2024-35722
1Awplife
1Slider Responsive Slideshow
Jun 17, 2026
Jun 10, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Missing Authorization vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through 1.4.0.
CVE-2024-35721
1Awplife
1Image Gallery
Jun 17, 2026
Jun 10, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Missing Authorization vulnerability in A WP Life Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery.This issue affects Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery:...Show more
Missing Authorization vulnerability in A WP Life Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery.This issue affects Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery: from n/a through 1.4.5.Show less
CVE-2024-35720
1Awplife
1Album Gallery
Jun 17, 2026
Jun 10, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Missing Authorization vulnerability in A WP Life Album Gallery – WordPress Gallery.This issue affects Album Gallery – WordPress Gallery: from n/a through 1.5.7.