CWE-862
11,263 CVEs • Abstraction: Class • Likelihood of Exploit: High
Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
CVEs (11,263)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Unauthenticated Settings Change in PayPlug for WooCommerce (Official) <= 3.1.0 versions. |
Unauthenticated Broken Access Control in WXD Backup Lite <= 1.0.2 versions. |
Unauthenticated Settings Change in TrueBooker <= 1.2.9 versions. |
Unauthenticated Broken Access Control in Advanced Posts Listing – Show Post List Easily <= 1.0.8 versions. |
Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API <= 1.6.3 versions. |
Unauthenticated Broken Access Control in 10Web Social Photo Feed <= 1.4.35 versions. |
Missing Authorization vulnerability in Patterns In The Cloud Autoship Cloud for WooCommerce Subscription Products autoship-cloud allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects...Show more |
Unauthenticated Broken Access Control in PayPlug for WooCommerce (Official) <= 3.1.0 versions. |
Subscriber Broken Access Control in App for Cloudflare® <= 1.10.1 versions. |
Missing Authorization vulnerability in Marcin Wise Chat wise-chat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wise Chat: from n/a through 3.4.3. |
Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce <= 1.1.2606090 versions. |
Subscriber Broken Access Control in WP2LEADS <= 3.5.7 versions. |
Missing Authorization vulnerability in royalnavneet Delete All Comments of wordpress delete-all-comments-of-website allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Delete All Co...Show more |
Unauthenticated Broken Access Control in picu <= 3.10.1 versions. |
Unauthenticated Broken Access Control in PowerPress Podcasting <= 11.17.9 versions. |
Subscriber Broken Access Control in WPO365 <= 44.1 versions. |
The Fast Courier WordPress plugin through 5.2.3 does not restrict an unauthenticated REST route that writes order fulfillment data, allowing unauthenticated attackers to overwrite the courier status and customer-facing...Show more |
1Qualcomm 1605g Fixed Wireless Access Platform Firmware 9205 Lte Modem Firmware9205s Modem Firmware+157 moreOct 9, 2026 Oct 6, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption when non-secure loader rewrites page tables before secure memory initialization. |
Unauthenticated Broken Access Control in Fluent Affiliate Pro <= 1.6.4 versions. |
Missing Authorization vulnerability in Green Invoice Morning for WooCommerce wc-gateway-greeninvoice allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Morning for WooCommerce: fro...Show more |