VYPR

CWE-862

Missing Authorization

ClassIncompleteLikelihood: High

Description

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Hierarchy (View 1000)

Parents

Related attack patterns (CAPEC)

CAPEC-665

CVEs mapped to this weakness (9,268)

page 365 of 464
  • CVE-2024-5860MedJun 18, 2024
    Tickera
    Tickera
    risk 0.28cvss 4.3epss 0.00

    The Tickera – WordPress Event Ticketing plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the tc_dl_delete_tickets AJAX action in all versions up to, and including, 3.5.2.8. This makes it possible for authenticated attackers,…

  • CVE-2023-51376MedJun 14, 2024
    WordPress
    ProjectHuddle Client Site
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Brainstorm Force ProjectHuddle Client Site.This issue affects ProjectHuddle Client Site: from n/a through 1.0.34.

  • CVE-2023-51523MedJun 14, 2024
    WordPress
    WooCommerce Easy Duplicate Product
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in WriterSystem WooCommerce Easy Duplicate Product.This issue affects WooCommerce Easy Duplicate Product: from n/a through 0.3.0.7.

  • CVE-2023-35045MedJun 14, 2024
    WordPress
    Fat Rat Collect
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Fat Rat Fat Rat Collect.This issue affects Fat Rat Collect: from n/a through 2.6.7.

  • CVE-2023-51524MedJun 12, 2024
    Weformspro
    Weforms
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in weForms.This issue affects weForms: from n/a through 1.6.18.

  • CVE-2023-47828MedJun 12, 2024
    Millermedia
    Mandrill
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Mandrill wpMandrill.This issue affects wpMandrill: from n/a through 1.33.

  • CVE-2023-44234MedJun 12, 2024
    WordPress
    WP GPX Map
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Bastianon Massimo WP GPX Map.This issue affects WP GPX Map: from n/a through 1.7.08.

  • CVE-2023-25030MedJun 12, 2024
    Buymeacoffee
    Buy Me A Coffee
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Buy Me a Coffee.This issue affects Buy Me a Coffee: from n/a through 3.7.

  • CVE-2023-52117MedJun 12, 2024
    Metagauss
    Profilegrid
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid: from n/a through 5.6.6.

  • CVE-2023-51680MedJun 12, 2024
    TechnoVama
    Quotes For Woocommerce
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in TechnoVama Quotes for WooCommerce.This issue affects Quotes for WooCommerce: from n/a through 2.0.1.

  • CVE-2023-51670MedJun 12, 2024
    Funnelkit
    Funnelkit Checkout
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3.

  • CVE-2023-51526MedJun 12, 2024
    WordPress
    Simple Staff List
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Brett Shumaker Simple Staff List.This issue affects Simple Staff List: from n/a through 2.2.4.

  • CVE-2024-32146MedJun 11, 2024
    WordPress
    Aspose.Words Exporter
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Aspose.Cloud Marketplace Aspose.Words Exporter.This issue affects Aspose.Words Exporter: from n/a through 6.3.1.

  • CVE-2024-32143MedJun 11, 2024
    Podlove
    Podlove Podcast Publisher
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlove Podcast Publisher: from n/a through 4.1.0.

  • CVE-2024-23518MedJun 11, 2024
    WordPress
    Acf Photo Gallery Field
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Navneil Naicker ACF Photo Gallery Field.This issue affects ACF Photo Gallery Field: from n/a through 2.6.

  • CVE-2023-52227MedJun 11, 2024
    WordPress
    MailerLite – WooCommerce integration
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in MailerLite MailerLite – WooCommerce integration.This issue affects MailerLite – WooCommerce integration: from n/a through 2.0.8.

  • CVE-2023-52224MedJun 11, 2024
    WordPress
    Revolut Gateway For Woocommerce
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in Revolut Revolut Gateway for WooCommerce.This issue affects Revolut Gateway for WooCommerce: from n/a through 4.9.7.

  • CVE-2024-23503MedJun 11, 2024
    Wpmanageninja
    Ninja Tables
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/a through 5.0.6.

  • CVE-2023-51519MedJun 11, 2024
    Soliloquy Team
    Slider By Soliloquy
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Soliloquy Team Slider by Soliloquy.This issue affects Slider by Soliloquy: from n/a through 2.7.2.

  • CVE-2024-35628MedJun 11, 2024
    WordPress
    Photo Gallery By 10web
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web.This issue affects Photo Gallery by 10Web: from n/a through 1.8.25.