VYPR

CWE-862

Missing Authorization

ClassIncompleteLikelihood: High

Description

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Hierarchy (View 1000)

Parents

Related attack patterns (CAPEC)

CAPEC-665

CVEs mapped to this weakness (10,032)

page 169 of 502
  • CVE-2021-35001MedMay 7, 2024
    BMC Software
    Track It\!
    risk 0.42cvss 6.5epss 0.01

    BMC Track-It! GetData Missing Authorization Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It!. Authentication is required to exploit this vulnerability. The specific flaw…

  • CVE-2024-33576MedMay 6, 2024
    WordPress
    Wppizza
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in Ollybach WPPizza.This issue affects WPPizza: from n/a through 3.18.10.

  • CVE-2024-33931MedMay 3, 2024
    WordPress
    JW Player for WordPress
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in ilGhera JW Player for WordPress.This issue affects JW Player for WordPress: from n/a through 2.3.3.

  • CVE-2024-33919MedMay 3, 2024
    WordPress
    Rometheme For Elementor
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in Rometheme RomethemeKit For Elementor.This issue affects RomethemeKit For Elementor: from n/a through 1.4.1.

  • CVE-2024-34146MedMay 2, 2024
    Jenkins Project
    Git Server
    risk 0.42cvss 6.5epss 0.01

    Jenkins Git server Plugin 114.v068a_c7cc2574 and earlier does not perform a permission check for read access to a Git repository over SSH, allowing attackers with a previously configured SSH public key but lacking Overall/Read permission to access these repositories.

  • CVE-2024-33944MedMay 2, 2024
    WordPress
    WooCommerce AWeber Newsletter Subscription
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in Kestrel WooCommerce AWeber Newsletter Subscription.This issue affects WooCommerce AWeber Newsletter Subscription: from n/a through 4.0.2.

  • CVE-2024-1371MedApr 30, 2024
    WordPress
    Leadconnector
    risk 0.42cvss 6.5epss 0.01

    The LeadConnector plugin for WordPress is vulnerable to unauthorized modification & loss of data due to a missing capability check on the lc_public_api_proxy() function in all versions up to, and including, 1.7. This makes it possible for unauthenticated attackers to delete…

  • CVE-2024-33589MedApr 29, 2024
    Logon
    Kb Support
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in WPOmnia KB Support.This issue affects KB Support: from n/a through 1.6.0.

  • CVE-2024-33684MedApr 29, 2024
    Pdfcrowd
    Save as PDF plugin
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in Pdfcrowd Save as PDF plugin by Pdfcrowd allows Stored XSS.This issue affects Save as PDF plugin by Pdfcrowd: from n/a through 3.2.0.

  • CVE-2024-33558MedApr 29, 2024
    8theme
    Xstore Core
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.5.

  • CVE-2024-33667MedApr 26, 2024
    Zammad
    Zammad
    risk 0.42cvss 6.5epss 0.01

    An issue was discovered in Zammad before 6.3.0. An authenticated agent could perform a remote Denial of Service attack by calling an endpoint that accepts a generic method name, which was not properly sanitized against an allowlist.

  • CVE-2024-32675MedApr 24, 2024
    WordPress
    Order Limit for WooCommerce
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in Xfinity Soft Order Limit for WooCommerce.This issue affects Order Limit for WooCommerce: from n/a through 2.0.0.

  • CVE-2024-32951MedApr 24, 2024
    WordPress
    Max Addons Pro Bricks
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in BloomPixel Max Addons Pro for Bricks.This issue affects Max Addons Pro for Bricks: from n/a through 1.6.1.

  • CVE-2024-32688MedApr 22, 2024
    WordPress
    MyRewards
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in Long Watch Studio MyRewards.This issue affects MyRewards: from n/a through 5.3.0.

  • CVE-2022-41698MedApr 17, 2024
    WordPress
    If Menu
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in Layered If Menu.This issue affects If Menu: from n/a through 0.16.3.

  • CVE-2024-32509MedApr 17, 2024
    WordPress
    Wp Cost Estimation Payment Forms Builder
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in Loopus WP Cost Estimation & Payment Forms Builder.This issue affects WP Cost Estimation & Payment Forms Builder: from n/a through 10.1.76.

  • CVE-2022-44633MedApr 11, 2024
    WordPress
    YITH WooCommerce Gift Cards premium
    risk 0.42cvss 6.5epss 0.00

    Missing Authorization vulnerability in YITH YITH WooCommerce Gift Cards Premium.This issue affects YITH WooCommerce Gift Cards Premium: from n/a through 3.23.1.

  • CVE-2024-31342MedApr 10, 2024
    WordPress
    WordPress Gallery Exporter
    risk 0.42cvss 6.5epss 0.01

    Missing Authorization vulnerability in WPcloudgallery WordPress Gallery Exporter.This issue affects WordPress Gallery Exporter: from n/a through 1.3.

  • CVE-2024-1042MedApr 10, 2024
    Wpmilitary
    Wp Radio
    risk 0.42cvss 6.4epss 0.00

    The WP Radio – Worldwide Online Radio Stations Directory for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX functions in all versions up to, and including, 3.1.9. This makes it possible for…

  • CVE-2024-1041MedApr 10, 2024
    Wpmilitary
    Wp Radio
    risk 0.42cvss 6.4epss 0.00

    The WP Radio – Worldwide Online Radio Stations Directory for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's settings in all versions up to, and including, 3.1.9 due to insufficient input sanitization and output escaping as well as…