CWE-862
Missing Authorization
Description
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-665
CVEs mapped to this weakness (10,936)
page 295 of 547| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-77013 | Med | 0.34 | 5.3 | 0.00 | Aug 31, 2026 | The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not restrict which of its handler methods a request may invoke, and performs no capability or nonce check on them, allowing unauthenticated users to create WordPress user accounts and taxonomy terms. | ||
| CVE-2026-19430 | Med | 0.34 | 5.3 | 0.00 | Aug 29, 2026 | The Catfolders Document Gallery Pro WordPress plugin before 2.0.7 does not authorise some of its REST API routes, and the token identifying the requested content is forgeable client side, allowing unauthenticated users to list and download the contents of folders that were never… | ||
| CVE-2026-77701 | Med | 0.34 | 5.3 | 0.00 | Aug 28, 2026 | The WCFM Marketplace WordPress plugin before 3.8.2 does not correctly verify that the person requesting a refund owns the order, allowing unauthenticated users to create refund requests against any guest checkout order on the site. | ||
| CVE-2026-12514 | Med | 0.34 | 5.3 | 0.00 | Aug 28, 2026 | The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.70 do not perform a capability check in their file-upload handler, which is registered for unauthenticated users and protected only by a nonce that is output on public pages, so an… | ||
| CVE-2026-81276 | Med | 0.34 | 5.3 | 0.00 | Aug 27, 2026 | Unauthenticated Broken Access Control in Kali Forms <= 2.4.23 versions. | ||
| CVE-2026-81274 | Med | 0.34 | 5.3 | 0.00 | Aug 27, 2026 | Subscriber Broken Access Control in Ditty <= 3.1.67 versions. | ||
| CVE-2026-77694 | Med | 0.34 | 5.3 | 0.00 | Aug 26, 2026 | The Eventin WordPress plugin before 4.1.19 does not properly restrict which changes a guest checkout token is allowed to authorise on an order, allowing unauthenticated users to mark their own unpaid order as completed and be issued a valid paid ticket with no payment taken. | ||
| CVE-2026-75798 | Med | 0.34 | 5.3 | 0.00 | Aug 26, 2026 | The AI Engine WordPress plugin before 3.7.2 does not perform an authorisation check on one of its administration-only features, relying instead on a token it hands out to anonymous visitors, allowing unauthenticated attackers to run AI queries of their own choosing against the… | ||
| CVE-2026-14550 | Med | 0.34 | 5.3 | 0.00 | Aug 26, 2026 | The WPCafe WordPress plugin before 3.0.18 does not perform an authorization check when creating a reservation through its REST API, verifying only a publicly available nonce, allowing unauthenticated users to submit reservations with an arbitrary approval status and bypass the… | ||
| CVE-2026-13406 | Med | 0.34 | 5.3 | 0.00 | Aug 26, 2026 | The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not perform any capability or nonce check before returning taxonomy term data for an arbitrary, caller-supplied taxonomy, allowing unauthenticated users to disclose the names and IDs of terms belonging to… | ||
| CVE-2026-13172 | Med | 0.34 | 5.3 | 0.00 | Aug 26, 2026 | The Eventin WordPress plugin before 4.1.22 does not restrict access to non-published content by status or ownership in one of its REST API namespaces, allowing unauthenticated users to retrieve draft, pending and private posts belonging to other users, along with the passwords… | ||
| CVE-2026-79104 | Med | 0.34 | 5.3 | 0.00 | Aug 25, 2026 | Missing authorization in Sensor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) | ||
| CVE-2026-79044 | Med | 0.34 | 5.3 | 0.00 | Aug 25, 2026 | Missing authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) | ||
| CVE-2026-17587 | Med | 0.34 | 5.3 | 0.00 | Aug 25, 2026 | The My Agile Privacy® – CMP, Cookie Consent & Privacy Tools plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.3.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it… | ||
| CVE-2026-10627 | Med | 0.34 | 5.3 | 0.00 | Aug 25, 2026 | The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.4.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it… | ||
| CVE-2026-78291 | Med | 0.34 | 5.3 | 0.00 | Aug 24, 2026 | Unauthenticated Broken Access Control in RepairBuddy <= 4.1223 versions. | ||
| CVE-2026-78258 | Med | 0.34 | 5.3 | 0.00 | Aug 24, 2026 | Unauthenticated Broken Access Control in Booking and Rental Manager <= 2.7.5 versions. | ||
| CVE-2026-75027 | Med | 0.34 | 5.3 | 0.01 | Aug 22, 2026 | The Themify Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.8.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to… | ||
| CVE-2026-16962 | Med | 0.34 | 5.3 | 0.00 | Aug 21, 2026 | The Tamara Checkout WordPress plugin through 1.9.9.20 does not verify the order key, a nonce, or any capability on its public payment cancel/fail return URLs, changing a WooCommerce order's status based solely on an attacker-supplied numeric order id, so an unauthenticated… | ||
| CVE-2026-55095 | Med | 0.34 | — | 0.00 | Aug 20, 2026 | OpenProject is open-source, web-based project management software. In version 17.5.1 and earlier, an authenticated non-admin project member can request the inplace-edit dialog for a raw custom_field_ project attribute. The dialog path resolves the project custom field by its raw… |
- risk 0.34cvss 5.3epss 0.00
The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not restrict which of its handler methods a request may invoke, and performs no capability or nonce check on them, allowing unauthenticated users to create WordPress user accounts and taxonomy terms.
- risk 0.34cvss 5.3epss 0.00
The Catfolders Document Gallery Pro WordPress plugin before 2.0.7 does not authorise some of its REST API routes, and the token identifying the requested content is forgeable client side, allowing unauthenticated users to list and download the contents of folders that were never…
- risk 0.34cvss 5.3epss 0.00
The WCFM Marketplace WordPress plugin before 3.8.2 does not correctly verify that the person requesting a refund owns the order, allowing unauthenticated users to create refund requests against any guest checkout order on the site.
- risk 0.34cvss 5.3epss 0.00
The Shared Files WordPress plugin before 1.7.67, shared-files-pro WordPress plugin before 1.7.70 do not perform a capability check in their file-upload handler, which is registered for unauthenticated users and protected only by a nonce that is output on public pages, so an…
- risk 0.34cvss 5.3epss 0.00
Unauthenticated Broken Access Control in Kali Forms <= 2.4.23 versions.
- risk 0.34cvss 5.3epss 0.00
Subscriber Broken Access Control in Ditty <= 3.1.67 versions.
- risk 0.34cvss 5.3epss 0.00
The Eventin WordPress plugin before 4.1.19 does not properly restrict which changes a guest checkout token is allowed to authorise on an order, allowing unauthenticated users to mark their own unpaid order as completed and be issued a valid paid ticket with no payment taken.
- risk 0.34cvss 5.3epss 0.00
The AI Engine WordPress plugin before 3.7.2 does not perform an authorisation check on one of its administration-only features, relying instead on a token it hands out to anonymous visitors, allowing unauthenticated attackers to run AI queries of their own choosing against the…
- risk 0.34cvss 5.3epss 0.00
The WPCafe WordPress plugin before 3.0.18 does not perform an authorization check when creating a reservation through its REST API, verifying only a publicly available nonce, allowing unauthenticated users to submit reservations with an arbitrary approval status and bypass the…
- risk 0.34cvss 5.3epss 0.00
The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not perform any capability or nonce check before returning taxonomy term data for an arbitrary, caller-supplied taxonomy, allowing unauthenticated users to disclose the names and IDs of terms belonging to…
- risk 0.34cvss 5.3epss 0.00
The Eventin WordPress plugin before 4.1.22 does not restrict access to non-published content by status or ownership in one of its REST API namespaces, allowing unauthenticated users to retrieve draft, pending and private posts belonging to other users, along with the passwords…
- risk 0.34cvss 5.3epss 0.00
Missing authorization in Sensor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
- risk 0.34cvss 5.3epss 0.00
Missing authorization in WebAppInstalls in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
- risk 0.34cvss 5.3epss 0.00
The My Agile Privacy® – CMP, Cookie Consent & Privacy Tools plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.3.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it…
- risk 0.34cvss 5.3epss 0.00
The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.4.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it…
- risk 0.34cvss 5.3epss 0.00
Unauthenticated Broken Access Control in RepairBuddy <= 4.1223 versions.
- risk 0.34cvss 5.3epss 0.00
Unauthenticated Broken Access Control in Booking and Rental Manager <= 2.7.5 versions.
- risk 0.34cvss 5.3epss 0.01
The Themify Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.8.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to…
- risk 0.34cvss 5.3epss 0.00
The Tamara Checkout WordPress plugin through 1.9.9.20 does not verify the order key, a nonce, or any capability on its public payment cancel/fail return URLs, changing a WooCommerce order's status based solely on an attacker-supplied numeric order id, so an unauthenticated…
- risk 0.34cvss —epss 0.00
OpenProject is open-source, web-based project management software. In version 17.5.1 and earlier, an authenticated non-admin project member can request the inplace-edit dialog for a raw custom_field_ project attribute. The dialog path resolves the project custom field by its raw…