← Back
CWE-862

8,736 CVEs • Abstraction: Class • Likelihood of Exploit: High

Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

JSON object

Loading...

CVEs (8,736)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-45356
1Muffingroup
1Betheme
Jun 17, 2026
Mar 25, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1.
CVE-2022-45352
1Muffingroup
1Betheme
Jun 17, 2026
Mar 25, 2024
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1.
CVE-2022-45351
1Muffingroup
1Betheme
Jun 17, 2026
Mar 25, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1.
CVE-2022-45349
1Muffingroup
1Betheme
Jun 17, 2026
Mar 25, 2024
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1.
CVE-2022-44626
1Squirrly
1Seo Plugin By Squirrly Seo
Jun 17, 2026
Mar 25, 2024
N/A· v4
6.3 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in Squirrly SEO Plugin by Squirrly SEO.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.1.20.
CVE-2022-38057
1Themehunk
1Th Advance Product Search
Jun 17, 2026
Mar 25, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Missing Authorization vulnerability in ThemeHunk Advance WordPress Search Plugin.This issue affects Advance WordPress Search Plugin: from n/a through 1.2.1.
CVE-2023-37886
1Inspirythemes
1Realhomes
Jun 17, 2026
Mar 25, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Missing Authorization vulnerability in InspiryThemes RealHomes.This issue affects RealHomes: from n/a through 4.0.2.
CVE-2023-37885
1Inspirythemes
1Realhomes
Jun 17, 2026
Mar 25, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Missing Authorization vulnerability in InspiryThemes RealHomes.This issue affects RealHomes: from n/a through 4.0.2.
CVE-2023-33923
-
-
Jun 17, 2026
Mar 25, 2024
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in HashThemes Viral News, HashThemes Viral, HashThemes HashOne.This issue affects Viral News: from n/a through 1.4.5; Viral: from n/a through 1.8.0; HashOne: from n/a through 1.3.0.
CVE-2023-30480
-
-
Jun 17, 2026
Mar 25, 2024
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in Sparkle WP Educenter.This issue affects Educenter: from n/a through 1.5.5.
CVE-2024-24840
1Bdthemes
1Element Pack
Jun 17, 2026
Mar 23, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in BdThemes Element Pack Elementor Addons.This issue affects Element Pack Elementor Addons: from n/a through 5.4.11.
CVE-2024-24835
1Pluginus
1Bear Woocommerce Bulk Editor And Products Manager Professional
Jun 17, 2026
Mar 23, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in realmag777 BEAR.This issue affects BEAR: from n/a through 1.1.4.
CVE-2024-24832
1Metagauss
1Eventprime
Jun 17, 2026
Mar 23, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Missing Authorization vulnerability in Metagauss EventPrime.This issue affects EventPrime: from n/a through 3.3.9.
CVE-2024-27190
1Jeandaviddaviet
1Download Media
Jun 17, 2026
Mar 21, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Missing Authorization vulnerability in Jean-David Daviet Download Media.This issue affects Download Media: from n/a through 1.4.2.
CVE-2024-1502
1Themeum
1Tutor Lms
Jun 17, 2026
Mar 21, 2024
N/A· v4
4.3 MEDIUM· v3
N/A· v2
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the tutor_delete_announcement() function in all versions up to, an...Show more
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the tutor_delete_announcement() function in all versions up to, and including, 2.6.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary posts.Show less
CVE-2023-49981
1Oretnom23
1School Fees Management System
Jun 17, 2026
Mar 21, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring authorization.
CVE-2023-49980
1Mayurik
1Best Student Result Management System
Jun 17, 2026
Mar 21, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
A directory listing vulnerability in Best Student Result Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring authorization.
CVE-2023-49979
1Mayurik
1Best Student Management System
Jun 17, 2026
Mar 21, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization.
CVE-2023-52229
-
-
Jun 17, 2026
Mar 20, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in Save as PDF plugin by Pdfcrowd Word Replacer Pro.This issue affects Word Replacer Pro: from n/a through 1.0.
CVE-2024-2702
1Olivethemes
1Olive One Click Demo Import
Jun 17, 2026
Mar 20, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Missing Authorization vulnerability in Olive Themes Olive One Click Demo Import allows importing settings and data, ultimately leading to XSS.This issue affects Olive One Click Demo Import: from n/a through 1.1.1.