VYPR

CWE-862

Missing Authorization

ClassIncompleteLikelihood: High

Description

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Hierarchy (View 1000)

Parents

Related attack patterns (CAPEC)

CAPEC-665

CVEs mapped to this weakness (10,936)

page 428 of 547
  • CVE-2023-32599MedDec 13, 2024
    WordPress
    Recaptcha For All
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Bill Minozzi reCAPTCHA for all allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects reCAPTCHA for all: from n/a through 1.22.

  • CVE-2023-32586MedDec 13, 2024
    WordPress
    Soundcloud Is Gold
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Thomas Michalak Soundcloud Is Gold allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Soundcloud Is Gold: from n/a through 2.5.1.

  • CVE-2023-32574MedDec 13, 2024
    WordPress
    Injection Guard
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Fahad Mahmood Injection Guard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Injection Guard: from n/a through 1.2.1.

  • CVE-2023-32519MedDec 13, 2024
    WordPress
    Wcp Contact Form
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in Webcodin WCP Contact Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCP Contact Form: from n/a through 3.1.0.

  • CVE-2023-28990MedDec 13, 2024
    WordPress
    Viral Mag
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in HashThemes Viral Mag allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Viral Mag: from n/a through 1.0.9.

  • CVE-2023-27456MedDec 13, 2024
    WordPress
    Total
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in HashThemes Total allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Total: from n/a through 2.1.19.

  • CVE-2022-47176MedDec 13, 2024
    Averta
    Depicter Slider
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in Depicter Slider and Popup by Averta Depicter Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Depicter Slider: from n/a through 1.9.0.

  • CVE-2022-47168MedDec 13, 2024
    WordPress
    Printful Integration for WooCommerce
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in printful Printful Integration for WooCommerce printful-shipping-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Printful Integration for WooCommerce: from n/a through <= 2.2.3.

  • CVE-2022-46811MedDec 13, 2024
    Villatheme
    ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in VillaTheme(villatheme.com) ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ALD – Dropshipping and Fulfillment for AliExpress…

  • CVE-2022-46807MedDec 13, 2024
    Lauri Karisola / WP Trio
    Stock Sync for WooCommerce
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in Lauri Karisola / WP Trio Stock Sync for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stock Sync for WooCommerce: from n/a through 2.3.2.

  • CVE-2022-45806MedDec 13, 2024
    WordPress
    Formidable Forms
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in Strategy11 Form Builder Team Formidable Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Formidable Forms: from n/a through 5.5.4.

  • CVE-2022-43472MedDec 13, 2024
    WordPress
    Eroom Zoom Meetings Webinar
    risk 0.28cvss 4.3epss 0.01

    Missing Authorization vulnerability in StylemixThemes eRoom – Zoom Meetings & Webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eRoom – Zoom Meetings & Webinar: from n/a through 1.4.6.

  • CVE-2024-11911MedDec 13, 2024
    WordPress
    Wp Crowdfunding
    risk 0.28cvss 4.3epss 0.00

    The WP Crowdfunding plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check on the install_woocommerce_plugin() function action in all versions up to, and including, 2.1.12. This makes it possible for authenticated attackers, with…

  • CVE-2024-55876MedDec 12, 2024
    Cryptpad
    Xwiki
    risk 0.28cvss 5.4epss 0.01

    XWiki Platform is a generic wiki platform. Starting in version 1.2-milestone-2 and prior to versions 15.10.9 and 16.3.0, any user with an account on the main wiki could run scheduling operations on subwikis. To reproduce, as a user on the main wiki without any special right,…

  • CVE-2024-12201MedDec 12, 2024
    WordPress
    Hash Form
    risk 0.28cvss 4.3epss 0.00

    The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to unauthorized access due to a missing capability check when creating form styles in all versions up to, and including, 1.2.1. This makes it possible for authenticated attackers, with…

  • CVE-2024-12263MedDec 12, 2024
    WordPress
    Orbisius Child Theme Creator
    risk 0.28cvss 4.3epss 0.00

    The Child Theme Creator by Orbisius plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the cloud_delete() and cloud_update() functions in all versions up to, and including, 1.5.5. This makes it possible for authenticated…

  • CVE-2024-11709MedDec 12, 2024
    WordPress
    AI Post Generator | AutoWriter
    risk 0.28cvss 4.3epss 0.00

    The AI Post Generator | AutoWriter plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ai_post_generator_delete_Post AJAX action in all versions up to, and including, 3.5. This makes it possible for authenticated…

  • CVE-2024-12341MedDec 12, 2024
    WordPress
    Custom Skins Contact Form 7
    risk 0.28cvss 4.3epss 0.00

    The Custom Skins Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'cf7cs_action_callback' function in all versions up to, and including, 1.0. This makes it possible for authenticated attackers, with…

  • CVE-2024-54269MedDec 11, 2024
    WordPress
    Notibar
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Ninja Team Notibar notibar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Notibar: from n/a through <= 2.1.4.

  • CVE-2024-47585MedDec 10, 2024
    SAP
    NetWeaver Application Server for ABAP
    risk 0.28cvss 4.3epss 0.00

    SAP NetWeaver Application Server for ABAP and ABAP Platform allows an authenticated attacker to gain higher access levels than they should have by exploiting improper authorization checks, resulting in privilege escalation. While authorizations for import and export are…