VYPR

CWE-862

Missing Authorization

ClassIncompleteLikelihood: High

Description

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Hierarchy (View 1000)

Parents

Related attack patterns (CAPEC)

CAPEC-665

CVEs mapped to this weakness (9,268)

page 357 of 464
  • CVE-2023-28532MedDec 9, 2024
    WordPress
    Real Estate Directory
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in wpdirectorykit.com Real Estate Directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Real Estate Directory: from n/a through 1.0.5.

  • CVE-2023-28416MedDec 9, 2024
    WordPress
    Chankhe
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Sparkle Themes Chankhe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chankhe: from n/a through 1.0.5.

  • CVE-2023-28165MedDec 9, 2024
    WordPress
    Wp Backup Bank
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Tech Banker Backup Bank: WordPress Backup Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Backup Bank: WordPress Backup Plugin: from n/a through 4.0.28.

  • CVE-2023-27625MedDec 9, 2024
    WordPress
    Site Reviews
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Paul Ryley Site Reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews: from n/a through 6.5.0.

  • CVE-2023-25486MedDec 9, 2024
    WordPress
    Wp Clone By Wp Academy
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a through 2.3.7.

  • CVE-2023-25067MedDec 9, 2024
    WordPress
    We’re Open!
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in Noah Hearle, Design Extreme We’re Open! allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects We’re Open!: from n/a through 1.45.

  • CVE-2023-25037MedDec 9, 2024
    WordPress
    Booking Calendar Contact Form
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in CodePeople Booking Calendar Contact Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking Calendar Contact Form: from n/a through 1.2.34.

  • CVE-2023-25026MedDec 9, 2024
    WordPress
    Paypal Brasil Para Woocommerce
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in PayPal PayPal Brasil para WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PayPal Brasil para WooCommerce: from n/a through 1.4.2.

  • CVE-2023-23834MedDec 9, 2024
    Brainstormforce
    Spectra
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spectra: from n/a through 2.3.0.

  • CVE-2023-23823MedDec 9, 2024
    WordPress
    Enhanced Text Widget
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Clever Widgets Enhanced Text Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Enhanced Text Widget: from n/a through 1.5.8.

  • CVE-2023-23725MedDec 9, 2024
    WordPress
    Shortcodes by Angie Makes
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in Chris Baldelomar Shortcodes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shortcodes: from n/a through 3.46.

  • CVE-2023-23716MedDec 9, 2024
    WordPress
    Zendesk Support for WordPress
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in Zendesk Zendesk Support for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zendesk Support for WordPress: from n/a through 1.8.4.

  • CVE-2023-22708MedDec 9, 2024
    Karim Salman
    Kraken.io Image Optimizer
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in Karim Salman Kraken.io Image Optimizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kraken.io Image Optimizer: from n/a through 2.6.7.

  • CVE-2024-12349MedDec 9, 2024
    JFinalcms
    JFinalcms
    risk 0.28cvss 4.3epss 0.00

    A vulnerability was found in JFinalCMS 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/tag/save. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has…

  • CVE-2024-11353MedDec 7, 2024
    WordPress
    SMS for Lead Capture Forms
    risk 0.28cvss 4.3epss 0.00

    The SMS for Lead Capture Forms plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_message() function in all versions up to, and including, 1.1.0. This makes it possible for authenticated attackers, with…

  • CVE-2024-53799MedDec 6, 2024
    WordPress
    FloristPress
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in BAKKBONE Australia FloristPress bakkbone-florist-companion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FloristPress: from n/a through <= 7.3.0.

  • CVE-2024-9705MedDec 6, 2024
    WordPress
    Ultimate Coming Soon \& Maintenance
    risk 0.28cvss 4.3epss 0.00

    The Ultimate Coming Soon & Maintenance plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ucsm_update_template_name_lite' function in all versions up to, and including, 1.0.9. This makes it possible for authenticated…

  • CVE-2024-12110MedDec 6, 2024
    WordPress
    Gold Addons For Elementor
    risk 0.28cvss 4.3epss 0.00

    The Gold Addons for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the activate() and deactivate() functions in all versions up to, and including, 1.3.2. This makes it possible for authenticated attackers,…

  • CVE-2024-10664MedDec 4, 2024
    WordPress
    BasePress Docs
    risk 0.28cvss 4.3epss 0.00

    The Knowledge Base documentation & wiki plugin – BasePress Docs plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the basepress_db_posts_update() function in all versions up to, and including, 2.16.3.3. This makes it…

  • CVE-2024-10663MedDec 4, 2024
    WordPress
    Eleblog – Elementor Blog And Magazine Addons
    risk 0.28cvss 4.3epss 0.00

    The Eleblog – Elementor Blog And Magazine Addons plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the goodbye_form_callback() function in all versions up to, and including, 1.8. This makes it possible for…