CWE-862
Missing Authorization
Description
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-665
CVEs mapped to this weakness (9,259)
page 454 of 463| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-57324 | Med | 0.00 | 6.5 | 0.00 | Jun 26, 2026 | Unauthenticated Broken Access Control in GIFT4U <= 1.0.10 versions. | ||
| CVE-2026-57323 | Med | 0.00 | 5.8 | 0.00 | Jun 26, 2026 | Unauthenticated Broken Access Control in Flash & HTML5 Video <= 2.11.0 versions. | ||
| CVE-2026-56773 | Hig | 0.00 | 8.8 | 0.00 | Jun 26, 2026 | Teable's v2 REST API controller lacks @Permissions metadata on ORPC endpoints, allowing any authenticated user to bypass authorization checks. Attackers can read table schemas, create tables, and modify or delete records across bases and tables via endpoints like GET… | ||
| CVE-2026-56063 | Hig | 0.00 | 8.3 | 0.00 | Jun 26, 2026 | Unauthenticated Broken Access Control in MailChimp Block <= 1.1.15 versions. | ||
| CVE-2026-56061 | Hig | 0.00 | 7.5 | 0.00 | Jun 26, 2026 | Unauthenticated Broken Access Control in Subscriptions for WooCommerce <= 1.9.5 versions. | ||
| CVE-2026-56038 | Hig | 0.00 | 8.8 | 0.00 | Jun 26, 2026 | Contributor Privilege Escalation in Frisbii Pay <= 1.8.2 versions. | ||
| CVE-2026-56025 | Hig | 0.00 | 7.5 | 0.00 | Jun 26, 2026 | Unauthenticated Broken Access Control in Paymob for WooCommerce <= 4.1.2 versions. | ||
| CVE-2026-54847 | Hig | 0.00 | 7.5 | 0.00 | Jun 26, 2026 | Unauthenticated Broken Access Control in Stylish Cost Calculator <= 8.3.9 versions. | ||
| CVE-2026-54846 | Hig | 0.00 | 7.5 | 0.00 | Jun 26, 2026 | Unauthenticated Broken Access Control in Syncee Premium Dropshipping & Wholesale <= 1.0.27 versions. | ||
| CVE-2026-54840 | Hig | 0.00 | 7.3 | 0.00 | Jun 26, 2026 | Unauthenticated Broken Access Control in Newsletters <= 4.13 versions. | ||
| CVE-2026-54837 | Hig | 0.00 | 7.5 | 0.00 | Jun 26, 2026 | Unauthenticated Broken Access Control in Intranet & Private Site – All-In-One Intranet <= 1.8.1 versions. | ||
| CVE-2026-54835 | Hig | 0.00 | 7.5 | 0.00 | Jun 26, 2026 | Unauthenticated Broken Access Control in Five Star Restaurant Menu <= 2.5.2 versions. | ||
| CVE-2026-54832 | Hig | 0.00 | 7.5 | 0.00 | Jun 26, 2026 | Unauthenticated Broken Access Control in Gutenverse Companion <= 2.5.0 versions. | ||
| CVE-2026-52701 | Med | 0.00 | 6.5 | 0.00 | Jun 26, 2026 | Unauthenticated Broken Access Control in User Registration <= 5.2.2 versions. | ||
| CVE-2026-24547 | Med | 0.00 | 5.3 | 0.00 | Jun 26, 2026 | Unauthenticated Broken Access Control in SiteGround Email Marketing <= 1.7.5 versions. | ||
| CVE-2025-64636 | Med | 0.00 | 5.3 | 0.00 | Jun 26, 2026 | Unauthenticated Broken Access Control in Donation Thermometer <= 2.2.7 versions. | ||
| CVE-2025-63079 | Med | 0.00 | 4.3 | 0.00 | Jun 26, 2026 | Contributor Broken Access Control in Live Copy Paste for Elementor <= 1.5.3 versions. | ||
| CVE-2025-63078 | Med | 0.00 | 4.3 | 0.00 | Jun 26, 2026 | Subscriber Broken Access Control in Restaurant Menu by MotoPress <= 2.4.11 versions. | ||
| CVE-2025-63041 | Med | 0.00 | 5.4 | 0.00 | Jun 26, 2026 | Contributor Broken Access Control in Forget About Shortcode Buttons <= 2.1.3 versions. | ||
| CVE-2026-57925 | Med | 0.00 | 4.3 | 0.00 | Jun 26, 2026 | In JetBrains YouTrack before 2026.2.16593 improper access control allowed reading saved queries and tags |
- risk 0.00cvss 6.5epss 0.00
Unauthenticated Broken Access Control in GIFT4U <= 1.0.10 versions.
- risk 0.00cvss 5.8epss 0.00
Unauthenticated Broken Access Control in Flash & HTML5 Video <= 2.11.0 versions.
- risk 0.00cvss 8.8epss 0.00
Teable's v2 REST API controller lacks @Permissions metadata on ORPC endpoints, allowing any authenticated user to bypass authorization checks. Attackers can read table schemas, create tables, and modify or delete records across bases and tables via endpoints like GET…
- risk 0.00cvss 8.3epss 0.00
Unauthenticated Broken Access Control in MailChimp Block <= 1.1.15 versions.
- risk 0.00cvss 7.5epss 0.00
Unauthenticated Broken Access Control in Subscriptions for WooCommerce <= 1.9.5 versions.
- risk 0.00cvss 8.8epss 0.00
Contributor Privilege Escalation in Frisbii Pay <= 1.8.2 versions.
- risk 0.00cvss 7.5epss 0.00
Unauthenticated Broken Access Control in Paymob for WooCommerce <= 4.1.2 versions.
- risk 0.00cvss 7.5epss 0.00
Unauthenticated Broken Access Control in Stylish Cost Calculator <= 8.3.9 versions.
- risk 0.00cvss 7.5epss 0.00
Unauthenticated Broken Access Control in Syncee Premium Dropshipping & Wholesale <= 1.0.27 versions.
- risk 0.00cvss 7.3epss 0.00
Unauthenticated Broken Access Control in Newsletters <= 4.13 versions.
- risk 0.00cvss 7.5epss 0.00
Unauthenticated Broken Access Control in Intranet & Private Site – All-In-One Intranet <= 1.8.1 versions.
- risk 0.00cvss 7.5epss 0.00
Unauthenticated Broken Access Control in Five Star Restaurant Menu <= 2.5.2 versions.
- risk 0.00cvss 7.5epss 0.00
Unauthenticated Broken Access Control in Gutenverse Companion <= 2.5.0 versions.
- risk 0.00cvss 6.5epss 0.00
Unauthenticated Broken Access Control in User Registration <= 5.2.2 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Broken Access Control in SiteGround Email Marketing <= 1.7.5 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Broken Access Control in Donation Thermometer <= 2.2.7 versions.
- risk 0.00cvss 4.3epss 0.00
Contributor Broken Access Control in Live Copy Paste for Elementor <= 1.5.3 versions.
- risk 0.00cvss 4.3epss 0.00
Subscriber Broken Access Control in Restaurant Menu by MotoPress <= 2.4.11 versions.
- risk 0.00cvss 5.4epss 0.00
Contributor Broken Access Control in Forget About Shortcode Buttons <= 2.1.3 versions.
- risk 0.00cvss 4.3epss 0.00
In JetBrains YouTrack before 2026.2.16593 improper access control allowed reading saved queries and tags