VYPR

CWE-862

Missing Authorization

ClassIncompleteLikelihood: High

Description

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Hierarchy (View 1000)

Parents

Related attack patterns (CAPEC)

CAPEC-665

CVEs mapped to this weakness (9,450)

page 294 of 473
  • CVE-2024-35735MedJun 10, 2024
    Codepeople
    Wp Time Slots Booking Form
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11.

  • CVE-2024-35729MedJun 10, 2024
    Tickera
    Tickera
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in Tickera Tickera tickera-event-ticketing-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tickera: from n/a through <= 3.5.2.6.

  • CVE-2024-23524MedJun 10, 2024
    Ontraport
    Pilotpress
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in ONTRAPORT Inc. PilotPress.This issue affects PilotPress: from n/a through 2.0.30.

  • CVE-2024-22298MedJun 10, 2024
    Tms Outsource
    Amelia
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in TMS Amelia ameliabooking.This issue affects Amelia: from n/a through 1.0.98.

  • CVE-2024-35748MedJun 9, 2024
    OPMC
    Woocommerce Dropshipping
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in OPMC WooCommerce Dropshipping.This issue affects WooCommerce Dropshipping: from n/a through 5.0.4.

  • CVE-2024-35661MedJun 9, 2024
    Softlabbd
    Upload Fields For Wpforms
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in SoftLab Upload Fields for WPForms.This issue affects Upload Fields for WPForms: from n/a through 1.0.2.

  • CVE-2024-34802MedJun 9, 2024
    Wpfoxly
    Adfoxly
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in AdFoxly AdFoxly – Ad Manager, AdSense Ads & Ads.Txt.This issue affects AdFoxly – Ad Manager, AdSense Ads & Ads.Txt: from n/a through 1.8.5.

  • CVE-2024-31276MedJun 9, 2024
    WordPress
    Products, Order & Customers Export for WooCommerce
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in WPFactory Products, Order & Customers Export for WooCommerce.This issue affects Products, Order & Customers Export for WooCommerce: from n/a through 2.0.8.

  • CVE-2024-31352MedJun 9, 2024
    Icegram
    Email Subscribers \& Newsletters
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in Email Subscribers & Newsletters.This issue affects Email Subscribers & Newsletters: from n/a through 5.7.13.

  • CVE-2024-32725MedJun 9, 2024
    Saleswonder Team
    5 Stars Rating Funnel
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in Saleswonder Team: Tobias 5 Stars Rating Funnel 5-stars-rating-funnel.This issue affects 5 Stars Rating Funnel: from n/a through <= 1.2.67.

  • CVE-2024-32727MedJun 9, 2024
    WordPress
    Romethemeform
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in Rometheme RomethemeForm For Elementor.This issue affects RomethemeForm For Elementor: from n/a through 1.1.2.

  • CVE-2024-32820MedJun 9, 2024
    WordPress
    Social Share Icons \& Social Share Buttons
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in Social Share Pro Social Share Icons & Social Share Buttons.This issue affects Social Share Icons & Social Share Buttons: from n/a through 3.6.2.

  • CVE-2024-32814MedJun 9, 2024
    WordPress
    Advanced Local Pickup For Woocommerce
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in Zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1.6.1.

  • CVE-2024-32813MedJun 9, 2024
    WordPress
    Integrate Google Drive
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.9.

  • CVE-2024-32799MedJun 9, 2024
    Realestateconnected
    Easy Property Listings
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in Merv Barrett Easy Property Listings.This issue affects Easy Property Listings: from n/a through 3.5.3.

  • CVE-2024-32779MedJun 9, 2024
    WordPress
    Vision Interactive
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in Avirtum Vision Interactive.This issue affects Vision Interactive: from n/a through 1.7.1.

  • CVE-2024-33545MedJun 9, 2024
    Aa Team
    Wzone
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in AA-Team WZone.This issue affects WZone: from n/a through 14.0.10.

  • CVE-2024-31274MedJun 9, 2024
    Wpdeveloper
    Embedpress
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in WPDeveloper EmbedPress.This issue affects EmbedPress: from n/a through 3.9.11.

  • CVE-2024-31273MedJun 9, 2024
    Joomsky
    Js Help Desk
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.3.

  • CVE-2024-30544MedJun 9, 2024
    Upqode
    Whizzy
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in UPQODE Whizzy.This issue affects Whizzy: from n/a through 1.1.18.