CWE-862
Missing Authorization
Description
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-665
CVEs mapped to this weakness (10,097)
page 485 of 505| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-65457 | Med | 0.00 | 4.3 | 0.00 | Jul 23, 2026 | Subscriber Broken Access Control in ЮKassa для WooCommerce <= 2.16.1 versions. | ||
| CVE-2026-65453 | Med | 0.00 | 5.3 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions. | ||
| CVE-2026-65452 | Med | 0.00 | 5.3 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions. | ||
| CVE-2026-64814 | Hig | 0.00 | 8.6 | 0.00 | Jul 23, 2026 | In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session | ||
| CVE-2026-61973 | Med | 0.00 | 4.3 | 0.00 | Jul 23, 2026 | Subscriber Broken Access Control in ShopLentor Pro <= 2.8.5 versions. | ||
| CVE-2026-61972 | Med | 0.00 | 5.3 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in ShopLentor Pro <= 2.8.5 versions. | ||
| CVE-2026-61954 | Hig | 0.00 | 7.5 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in PayU India <= 3.8.9 versions. | ||
| CVE-2026-61943 | Hig | 0.00 | 7.5 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in WPDM – Premium Packages <= 6.2.0 versions. | ||
| CVE-2026-59547 | Hig | 0.00 | 7.5 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in Payment Gateway for PayPal on WooCommerce <= 9.1.4 versions. | ||
| CVE-2026-59522 | Med | 0.00 | 6.5 | 0.00 | Jul 23, 2026 | Subscriber Broken Access Control in WP ERP <= 1.17.5 versions. | ||
| CVE-2026-57808 | Med | 0.00 | 6.5 | 0.00 | Jul 23, 2026 | Subscriber Arbitrary Content Deletion in WP EasyPay <= 4.5.0 versions. | ||
| CVE-2026-57717 | Med | 0.00 | 6.5 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in Knit Pay <= 9.6.0.0 versions. | ||
| CVE-2026-57703 | Med | 0.00 | 6.3 | 0.00 | Jul 23, 2026 | Subscriber Broken Access Control in Sunshine Photo Cart <= 3.6.10.1 versions. | ||
| CVE-2026-57367 | Hig | 0.00 | 7.1 | 0.00 | Jul 23, 2026 | Subscriber Broken Access Control in WP Booking System < 5.12.8.1 versions. | ||
| CVE-2026-27423 | Med | 0.00 | 4.3 | 0.00 | Jul 23, 2026 | Subscriber Broken Access Control in Participants Database <= 2.7.8.4 versions. | ||
| CVE-2026-27418 | Med | 0.00 | 5.3 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in WP Fast Total Search <= 1.81.282 versions. | ||
| CVE-2026-27399 | Med | 0.00 | 5.3 | 0.00 | Jul 23, 2026 | Unauthenticated Broken Access Control in MarketKing <= 2.1.40 versions. | ||
| CVE-2026-27392 | Med | 0.00 | 4.3 | 0.00 | Jul 23, 2026 | Contributor Broken Access Control in uListing <= 2.2.0 versions. | ||
| CVE-2026-27391 | Med | 0.00 | 5.4 | 0.00 | Jul 23, 2026 | Subscriber Broken Access Control in uListing <= 2.2.0 versions. | ||
| CVE-2026-27377 | Med | 0.00 | 6.7 | 0.00 | Jul 23, 2026 | Booking Agent Broken Access Control in QuickCal - Appointment Booking Calendar for WordPress <= 1.0.16 versions. |
- risk 0.00cvss 4.3epss 0.00
Subscriber Broken Access Control in ЮKassa для WooCommerce <= 2.16.1 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions.
- risk 0.00cvss 8.6epss 0.00
In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session
- risk 0.00cvss 4.3epss 0.00
Subscriber Broken Access Control in ShopLentor Pro <= 2.8.5 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Broken Access Control in ShopLentor Pro <= 2.8.5 versions.
- risk 0.00cvss 7.5epss 0.00
Unauthenticated Broken Access Control in PayU India <= 3.8.9 versions.
- risk 0.00cvss 7.5epss 0.00
Unauthenticated Broken Access Control in WPDM – Premium Packages <= 6.2.0 versions.
- risk 0.00cvss 7.5epss 0.00
Unauthenticated Broken Access Control in Payment Gateway for PayPal on WooCommerce <= 9.1.4 versions.
- risk 0.00cvss 6.5epss 0.00
Subscriber Broken Access Control in WP ERP <= 1.17.5 versions.
- risk 0.00cvss 6.5epss 0.00
Subscriber Arbitrary Content Deletion in WP EasyPay <= 4.5.0 versions.
- risk 0.00cvss 6.5epss 0.00
Unauthenticated Broken Access Control in Knit Pay <= 9.6.0.0 versions.
- risk 0.00cvss 6.3epss 0.00
Subscriber Broken Access Control in Sunshine Photo Cart <= 3.6.10.1 versions.
- risk 0.00cvss 7.1epss 0.00
Subscriber Broken Access Control in WP Booking System < 5.12.8.1 versions.
- risk 0.00cvss 4.3epss 0.00
Subscriber Broken Access Control in Participants Database <= 2.7.8.4 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Broken Access Control in WP Fast Total Search <= 1.81.282 versions.
- risk 0.00cvss 5.3epss 0.00
Unauthenticated Broken Access Control in MarketKing <= 2.1.40 versions.
- risk 0.00cvss 4.3epss 0.00
Contributor Broken Access Control in uListing <= 2.2.0 versions.
- risk 0.00cvss 5.4epss 0.00
Subscriber Broken Access Control in uListing <= 2.2.0 versions.
- risk 0.00cvss 6.7epss 0.00
Booking Agent Broken Access Control in QuickCal - Appointment Booking Calendar for WordPress <= 1.0.16 versions.