CWE-862
Missing Authorization
Description
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-665
CVEs mapped to this weakness (9,267)
page 438 of 464| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-65469 | Med | 0.00 | 5.3 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in AWP Classifieds <= 4.4.7 versions. | ||
| CVE-2026-65468 | Med | 0.00 | 5.3 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in JetBooking <= 4.1.2 versions. | ||
| CVE-2026-65457 | Med | 0.00 | 4.3 | 0.00 | Jul 23, 2026 | Subscriber Broken Access Control in ЮKassa для WooCommerce <= 2.16.1 versions. | ||
| CVE-2026-65453 | Med | 0.00 | 5.3 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions. | ||
| CVE-2026-65452 | Med | 0.00 | 5.3 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions. | ||
| CVE-2026-64814 | Hig | 0.00 | 8.6 | 0.00 | Jul 23, 2026 | In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session | ||
| CVE-2026-61973 | Med | 0.00 | 4.3 | 0.00 | Jul 23, 2026 | Subscriber Broken Access Control in ShopLentor Pro <= 2.8.5 versions. | ||
| CVE-2026-61972 | Med | 0.00 | 5.3 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in ShopLentor Pro <= 2.8.5 versions. | ||
| CVE-2026-61954 | Hig | 0.00 | 7.5 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in PayU India <= 3.8.9 versions. | ||
| CVE-2026-61943 | Hig | 0.00 | 7.5 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in WPDM – Premium Packages <= 6.2.0 versions. | ||
| CVE-2026-59547 | Hig | 0.00 | 7.5 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in Payment Gateway for PayPal on WooCommerce <= 9.1.4 versions. | ||
| CVE-2026-59522 | Med | 0.00 | 6.5 | 0.00 | Jul 23, 2026 | Subscriber Broken Access Control in WP ERP <= 1.17.5 versions. | ||
| CVE-2026-57808 | Med | 0.00 | 6.5 | 0.00 | Jul 23, 2026 | Subscriber Arbitrary Content Deletion in WP EasyPay <= 4.5.0 versions. | ||
| CVE-2026-57717 | Med | 0.00 | 6.5 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in Knit Pay <= 9.6.0.0 versions. | ||
| CVE-2026-57703 | Med | 0.00 | 6.3 | 0.00 | Jul 23, 2026 | Subscriber Broken Access Control in Sunshine Photo Cart <= 3.6.10.1 versions. | ||
| CVE-2026-57425 | Med | 0.00 | 6.5 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in Autopay dla WooCommerce <= 2.2.27 versions. | ||
| CVE-2026-57367 | Hig | 0.00 | 7.1 | 0.00 | Jul 23, 2026 | Subscriber Broken Access Control in WP Booking System < 5.12.8.1 versions. | ||
| CVE-2026-27423 | Med | 0.00 | 4.3 | 0.00 | Jul 23, 2026 | Subscriber Broken Access Control in Participants Database <= 2.7.8.4 versions. | ||
| CVE-2026-27422 | Med | 0.00 | 5.3 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in YT Player <= 2.0.9 versions. | ||
| CVE-2026-27418 | Med | 0.00 | 5.3 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in WP Fast Total Search <= 1.81.282 versions. |
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Broken Access Control in AWP Classifieds <= 4.4.7 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Broken Access Control in JetBooking <= 4.1.2 versions.
- risk 0.00cvss 4.3epss 0.00
Subscriber Broken Access Control in ЮKassa для WooCommerce <= 2.16.1 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions.
- risk 0.00cvss 8.6epss 0.00
In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session
- risk 0.00cvss 4.3epss 0.00
Subscriber Broken Access Control in ShopLentor Pro <= 2.8.5 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Broken Access Control in ShopLentor Pro <= 2.8.5 versions.
- risk 0.00cvss 7.5epss 0.00
Unauthenticated Broken Access Control in PayU India <= 3.8.9 versions.
- risk 0.00cvss 7.5epss 0.00
Unauthenticated Broken Access Control in WPDM – Premium Packages <= 6.2.0 versions.
- risk 0.00cvss 7.5epss 0.00
Unauthenticated Broken Access Control in Payment Gateway for PayPal on WooCommerce <= 9.1.4 versions.
- risk 0.00cvss 6.5epss 0.00
Subscriber Broken Access Control in WP ERP <= 1.17.5 versions.
- risk 0.00cvss 6.5epss 0.00
Subscriber Arbitrary Content Deletion in WP EasyPay <= 4.5.0 versions.
- risk 0.00cvss 6.5epss 0.00
Unauthenticated Broken Access Control in Knit Pay <= 9.6.0.0 versions.
- risk 0.00cvss 6.3epss 0.00
Subscriber Broken Access Control in Sunshine Photo Cart <= 3.6.10.1 versions.
- risk 0.00cvss 6.5epss 0.00
Unauthenticated Broken Access Control in Autopay dla WooCommerce <= 2.2.27 versions.
- risk 0.00cvss 7.1epss 0.00
Subscriber Broken Access Control in WP Booking System < 5.12.8.1 versions.
- risk 0.00cvss 4.3epss 0.00
Subscriber Broken Access Control in Participants Database <= 2.7.8.4 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Broken Access Control in YT Player <= 2.0.9 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Broken Access Control in WP Fast Total Search <= 1.81.282 versions.