VYPR

CWE-862

Missing Authorization

ClassIncompleteLikelihood: High

Description

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Hierarchy (View 1000)

Parents

Related attack patterns (CAPEC)

CAPEC-665

CVEs mapped to this weakness (9,487)

page 233 of 475
  • CVE-2023-51679MedJun 12, 2024
    BulkGate
    Sms Plugin For Woocommerce
    risk 0.35cvss 5.4epss 0.00

    Missing Authorization vulnerability in BulkGate BulkGate SMS Plugin for WooCommerce.This issue affects BulkGate SMS Plugin for WooCommerce: from n/a through 3.0.2.

  • CVE-2023-51671MedJun 12, 2024
    Funnelkit
    Funnelkit Checkout
    risk 0.35cvss 5.4epss 0.00

    Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3.

  • CVE-2024-34815MedJun 11, 2024
    WordPress
    Import And Export Users And Customers
    risk 0.35cvss 5.4epss 0.00

    Missing Authorization vulnerability in Javier Carazo Import and export users and customers import-users-from-csv-with-meta.This issue affects Import and export users and customers: from n/a through <= 1.26.5.

  • CVE-2024-34804MedJun 11, 2024
    WordPress
    Tagembed Widget
    risk 0.35cvss 5.4epss 0.00

    Missing Authorization vulnerability in Tagembed.This issue affects Tagembed: from n/a through 5.8.

  • CVE-2024-32144MedJun 11, 2024
    Welcart
    E Commerce
    risk 0.35cvss 5.4epss 0.00

    Missing Authorization vulnerability in Welcart Inc. Welcart e-Commerce.This issue affects Welcart e-Commerce: from n/a through 2.9.14.

  • CVE-2024-35663MedJun 11, 2024
    WordPress
    Wp Translate
    risk 0.35cvss 5.4epss 0.00

    Missing Authorization vulnerability in HahnCreativeGroup WP Translate.This issue affects WP Translate: from n/a through 5.3.0.

  • CVE-2023-52199MedJun 11, 2024
    Automattic
    Activitypub
    risk 0.35cvss 6.5epss 0.00

    Missing Authorization vulnerability in Matthias Pfefferle & Automattic ActivityPub.This issue affects ActivityPub: from n/a through 1.0.5.

  • CVE-2023-52183MedJun 11, 2024
    WordPress
    WordPress Backup & Migration
    risk 0.35cvss 5.4epss 0.00

    Missing Authorization vulnerability in WebToffee WordPress Backup & Migration.This issue affects WordPress Backup & Migration: from n/a through 1.4.3.

  • CVE-2023-52179MedJun 11, 2024
    WordPress
    Product Expiry For Woocommerce
    risk 0.35cvss 5.4epss 0.00

    Missing Authorization vulnerability in WebCodingPlace Product Expiry for WooCommerce.This issue affects Product Expiry for WooCommerce: from n/a through 2.5.

  • CVE-2024-24704MedJun 11, 2024
    Addonmaster
    Load More Anything
    risk 0.35cvss 5.4epss 0.00

    Missing Authorization vulnerability in AddonMaster Load More Anything.This issue affects Load More Anything: from n/a through 3.3.3.

  • CVE-2024-34690MedJun 11, 2024
    SAP
    Student Life Cycle Management
    risk 0.35cvss 5.4epss 0.00

    SAP Student Life Cycle Management (SLcM) fails to conduct proper authorization checks for authenticated users, leading to the potential escalation of privileges. On successful exploitation it could allow an attacker to access and edit non-sensitive report variants that are…

  • CVE-2024-21751MedJun 10, 2024
    RabbitLoader
    RabbitLoader
    risk 0.35cvss 5.4epss 0.00

    Missing Authorization vulnerability in RabbitLoader.This issue affects RabbitLoader: from n/a through 2.19.13.

  • CVE-2024-35662MedJun 9, 2024
    Andreas Sofantzis
    Simple COD Fees for WooCommerce
    risk 0.35cvss 5.4epss 0.00

    Missing Authorization vulnerability in Andreas Sofantzis Simple COD Fees for WooCommerce.This issue affects Simple COD Fees for WooCommerce: from n/a through 2.0.2.

  • CVE-2024-32713MedJun 9, 2024
    WordPress
    AI Post Generator | AutoWriter
    risk 0.35cvss 5.4epss 0.00

    Missing Authorization vulnerability in AutoWriter AI Post Generator | AutoWriter.This issue affects AI Post Generator | AutoWriter: from n/a through 3.3.

  • CVE-2024-32824MedJun 9, 2024
    Evergreencontentposter
    Evergreen Content Poster
    risk 0.35cvss 5.4epss 0.00

    Missing Authorization vulnerability in Evergreen Content Poster Evergreen Content Poster evergreen-content-poster.This issue affects Evergreen Content Poster: from n/a through <= 1.4.2.

  • CVE-2024-32797MedJun 9, 2024
    WordPress
    Wp Linkedin Auto Publish
    risk 0.35cvss 5.4epss 0.00

    Missing Authorization vulnerability in Martin Gibson WP LinkedIn Auto Publish.This issue affects WP LinkedIn Auto Publish: from n/a through 8.11.

  • CVE-2024-30466MedJun 9, 2024
    WordPress
    WooCommerce Multilingual & Multicurrency
    risk 0.35cvss 5.4epss 0.00

    Missing Authorization vulnerability in OnTheGoSystems WooCommerce Multilingual & Multicurrency.This issue affects WooCommerce Multilingual & Multicurrency: from n/a through 5.3.4.

  • CVE-2024-30464MedJun 9, 2024
    Wpzoom
    Social Icons Widget
    risk 0.35cvss 5.4epss 0.01

    Missing Authorization vulnerability in WPZOOM Social Icons Widget & Block by WPZOOM.This issue affects Social Icons Widget & Block by WPZOOM: from n/a through 4.2.15.

  • CVE-2024-24716MedJun 9, 2024
    Getawesomesupport
    Awesome Support
    risk 0.35cvss 5.4epss 0.00

    Missing Authorization vulnerability in Awesome Support Team Awesome Support.This issue affects Awesome Support: from n/a through 6.1.6.

  • CVE-2023-23640MedJun 9, 2024
    Mainwp
    Updraftplus Extension
    risk 0.35cvss 5.4epss 0.00

    Missing Authorization vulnerability in MainWP MainWP UpdraftPlus Extension.This issue affects MainWP UpdraftPlus Extension: from n/a through 4.0.6.