CWE-862

Missing Authorization

ClassIncompleteLikelihood: High

Description

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Hierarchy (View 1000)

Parents

CWE-285

Children

Related attack patterns (CAPEC)

CAPEC-665

CVEs mapped to this weakness (9,268)

page 359 of 464

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2024-10543	WordPress Tumult Hype Animations	Med	0.28	4.3	0.00	Nov 6, 2024	The Tumult Hype Animations plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the hypeanimations_getcontent function in all versions up to, and including, 1.9.14. This makes it possible for authenticated attackers, with…
CVE-2024-48045	Leevio Happy Addons For Elementor	Med	0.28	4.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Happy Addons for Elementor: from n/a through <= 3.12.3.
CVE-2024-48039	Cubewp Cubewp	Med	0.28	4.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CubeWP: from n/a through <= 1.1.15.
CVE-2024-47362	Wpchill Strong Testimonials	Med	0.28	4.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials.This issue affects Strong Testimonials: from n/a through <= 3.1.16.
CVE-2024-47318	WordPress PWA for WP & AMP	Med	0.28	4.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in Magazine3 PWA for WP & AMP pwa-for-wp.This issue affects PWA for WP & AMP: from n/a through <= 1.7.72.
CVE-2024-47317	Wpquads Ads	Med	0.28	4.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in Ads by WPQuads Ads by WPQuads quick-adsense-reloaded.This issue affects Ads by WPQuads: from n/a through <= 2.0.84.
CVE-2024-44052	Helloasso Helloasso	Med	0.28	4.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in HelloAsso HelloAsso helloasso.This issue affects HelloAsso: from n/a through <= 1.1.10.
CVE-2024-44031	Beardev Joomsport	Med	0.28	4.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in beardev JoomSport joomsport-sports-league-results-management.This issue affects JoomSport: from n/a through <= 5.6.3.
CVE-2024-44020	Prasadkirpekar Wp Free SSL	Med	0.28	4.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in prasadkirpekar WP Free SSL – Free SSL Certificate for WordPress and force HTTPS wp-free-ssl.This issue affects WP Free SSL – Free SSL Certificate for WordPress and force HTTPS: from n/a through <= 1.2.7.
CVE-2024-44006	WordPress WooCommerce Multilingual & Multicurrency	Med	0.28	4.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in Amir Helzer WooCommerce Multilingual & Multicurrency woocommerce-multilingual.This issue affects WooCommerce Multilingual & Multicurrency: from n/a through <= 5.3.6.
CVE-2024-43973	Ayecode Getpaid	Med	0.28	4.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in Stiofan GetPaid invoicing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GetPaid: from n/a through <= 2.8.11.
CVE-2024-43925	Enviragallery Envira Gallery	Med	0.28	4.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in Envira Gallery Team Envira Photo Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Envira Photo Gallery: from n/a through 1.8.14.
CVE-2024-43355	Beardev Joomsport	Med	0.28	4.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in BearDev JoomSport allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JoomSport: from n/a through 5.3.0.
CVE-2024-43343	Etoilewebdesign Order Tracking	Med	0.28	4.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in Etoile Web Design Order Tracking allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Order Tracking: from n/a through 3.3.12.
CVE-2024-43332	Jordy Meow Photo Engine	Med	0.28	4.3	0.01	Nov 1, 2024	Missing Authorization vulnerability in Jordy Meow Photo Engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Engine: from n/a through 6.4.0.
CVE-2024-43314	Gabe Livan Asset Cleanup: Page Speed Booster	Med	0.28	4.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Asset CleanUp: Page Speed Booster: from n/a through 1.3.9.3.
CVE-2024-43302	Fontsplugin Fonts	Med	0.28	4.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in Fonts Plugin Fonts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fonts: from n/a through 3.7.7.
CVE-2024-43298	Backupbliss Clone	Med	0.28	4.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a through 2.4.5.
CVE-2024-43297	Backupbliss Clone	Med	0.28	4.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a through 2.4.5.
CVE-2024-43296	Bplugins Flash & HTML5 Video	Med	0.28	4.3	0.00	Nov 1, 2024	Missing Authorization vulnerability in bPlugins LLC Flash & HTML5 Video allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flash & HTML5 Video: from n/a through 2.5.30.

CVE-2024-10543MedNov 6, 2024
WordPress
Tumult Hype Animations
risk 0.28cvss 4.3epss 0.00
The Tumult Hype Animations plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the hypeanimations_getcontent function in all versions up to, and including, 1.9.14. This makes it possible for authenticated attackers, with…
CVE-2024-48045MedNov 1, 2024
Leevio
Happy Addons For Elementor
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Happy Addons for Elementor: from n/a through <= 3.12.3.
CVE-2024-48039MedNov 1, 2024
Cubewp
Cubewp
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CubeWP: from n/a through <= 1.1.15.
CVE-2024-47362MedNov 1, 2024
Wpchill
Strong Testimonials
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials.This issue affects Strong Testimonials: from n/a through <= 3.1.16.
CVE-2024-47318MedNov 1, 2024
WordPress
PWA for WP & AMP
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Magazine3 PWA for WP & AMP pwa-for-wp.This issue affects PWA for WP & AMP: from n/a through <= 1.7.72.
CVE-2024-47317MedNov 1, 2024
Wpquads
Ads
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Ads by WPQuads Ads by WPQuads quick-adsense-reloaded.This issue affects Ads by WPQuads: from n/a through <= 2.0.84.
CVE-2024-44052MedNov 1, 2024
Helloasso
Helloasso
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in HelloAsso HelloAsso helloasso.This issue affects HelloAsso: from n/a through <= 1.1.10.
CVE-2024-44031MedNov 1, 2024
Beardev
Joomsport
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in beardev JoomSport joomsport-sports-league-results-management.This issue affects JoomSport: from n/a through <= 5.6.3.
CVE-2024-44020MedNov 1, 2024
Prasadkirpekar
Wp Free SSL
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in prasadkirpekar WP Free SSL – Free SSL Certificate for WordPress and force HTTPS wp-free-ssl.This issue affects WP Free SSL – Free SSL Certificate for WordPress and force HTTPS: from n/a through <= 1.2.7.
CVE-2024-44006MedNov 1, 2024
WordPress
WooCommerce Multilingual & Multicurrency
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Amir Helzer WooCommerce Multilingual & Multicurrency woocommerce-multilingual.This issue affects WooCommerce Multilingual & Multicurrency: from n/a through <= 5.3.6.
CVE-2024-43973MedNov 1, 2024
Ayecode
Getpaid
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Stiofan GetPaid invoicing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GetPaid: from n/a through <= 2.8.11.
CVE-2024-43925MedNov 1, 2024
Enviragallery
Envira Gallery
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Envira Gallery Team Envira Photo Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Envira Photo Gallery: from n/a through 1.8.14.
CVE-2024-43355MedNov 1, 2024
Beardev
Joomsport
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in BearDev JoomSport allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JoomSport: from n/a through 5.3.0.
CVE-2024-43343MedNov 1, 2024
Etoilewebdesign
Order Tracking
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Etoile Web Design Order Tracking allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Order Tracking: from n/a through 3.3.12.
CVE-2024-43332MedNov 1, 2024
Jordy Meow
Photo Engine
risk 0.28cvss 4.3epss 0.01
Missing Authorization vulnerability in Jordy Meow Photo Engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Engine: from n/a through 6.4.0.
CVE-2024-43314MedNov 1, 2024
Gabe Livan
Asset Cleanup: Page Speed Booster
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Asset CleanUp: Page Speed Booster: from n/a through 1.3.9.3.
CVE-2024-43302MedNov 1, 2024
Fontsplugin
Fonts
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Fonts Plugin Fonts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fonts: from n/a through 3.7.7.
CVE-2024-43298MedNov 1, 2024
Backupbliss
Clone
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a through 2.4.5.
CVE-2024-43297MedNov 1, 2024
Backupbliss
Clone
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a through 2.4.5.
CVE-2024-43296MedNov 1, 2024
Bplugins
Flash & HTML5 Video
risk 0.28cvss 4.3epss 0.00
Missing Authorization vulnerability in bPlugins LLC Flash & HTML5 Video allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flash & HTML5 Video: from n/a through 2.5.30.