VYPR

CWE-862

Missing Authorization

ClassIncompleteLikelihood: High

Description

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Hierarchy (View 1000)

Parents

Related attack patterns (CAPEC)

CAPEC-665

CVEs mapped to this weakness (9,268)

page 89 of 464
  • CVE-2023-36516HigJun 19, 2024
    Thimpress
    Learnpress
    risk 0.49cvss 7.6epss 0.01

    Missing Authorization vulnerability in ThimPress LearnPress.This issue affects LearnPress: from n/a through 4.2.3.

  • CVE-2023-38386HigJun 19, 2024
    WordPress
    Ninja Forms
    risk 0.49cvss 7.6epss 0.01

    Missing Authorization vulnerability in Saturday Drive Ninja Forms.This issue affects Ninja Forms: from n/a through 3.6.25.

  • CVE-2023-35049HigJun 19, 2024
    WooCommerce
    Stripe Payment Gateway
    risk 0.49cvss 7.5epss 0.01

    Missing Authorization vulnerability in WooCommerce WooCommerce Stripe Payment Gateway.This issue affects WooCommerce Stripe Payment Gateway: from n/a through 7.4.0.

  • CVE-2023-47770HigJun 19, 2024
    Muffingroup
    Betheme
    risk 0.49cvss 7.6epss 0.00

    Missing Authorization vulnerability in Muffin Group Betheme.This issue affects Betheme: from n/a through 27.1.1.

  • CVE-2023-45658HigJun 19, 2024
    WordPress
    Nexter
    risk 0.49cvss 7.6epss 0.00

    Missing Authorization vulnerability in POSIMYTH Nexter.This issue affects Nexter: from n/a through 2.0.3.

  • CVE-2023-48759HigJun 19, 2024
    Crocoblock
    Jetelements
    risk 0.49cvss 7.5epss 0.00

    Missing Authorization vulnerability in Crocoblock JetElements For Elementor.This issue affects JetElements For Elementor: from n/a through 2.6.13.

  • CVE-2023-48280HigJun 12, 2024
    WordPress
    Consensu Io
    risk 0.49cvss 7.5epss 0.00

    Missing Authorization vulnerability in Consensu.IO Consensu.Io.This issue affects Consensu.Io: from n/a through 1.0.1.

  • CVE-2024-24703HigJun 11, 2024
    WordPress
    WC Marketplace
    risk 0.49cvss 8.6epss 0.00

    Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.0.25.

  • CVE-2024-34800HigJun 10, 2024
    WordPress
    Crafthemes Demo Import
    risk 0.49cvss 7.6epss 0.00

    Missing Authorization vulnerability in Crafthemes Crafthemes Demo Import crafthemes-demo-import allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Crafthemes Demo Import: from n/a through <= 3.3.

  • CVE-2024-31283HigJun 9, 2024
    Zorem
    Advanced Local Pickup For Woocommerce
    risk 0.49cvss 7.5epss 0.00

    Missing Authorization vulnerability in zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1.6.2.

  • CVE-2024-32715HigJun 9, 2024
    Olivethemes
    Olive One Click Demo Import
    risk 0.49cvss 7.5epss 0.00

    Missing Authorization vulnerability in Olive Themes Olive One Click Demo Import.This issue affects Olive One Click Demo Import: from n/a through 1.1.1.

  • CVE-2024-32798HigJun 9, 2024
    Wptravelengine
    Wp Travel Engine
    risk 0.49cvss 7.5epss 0.00

    Missing Authorization vulnerability in WP Travel Engine.This issue affects WP Travel Engine: from n/a through 5.8.0.

  • CVE-2024-32777HigJun 9, 2024
    bizswoop
    BizPrint
    risk 0.49cvss 7.5epss 0.00

    Missing Authorization vulnerability in BizSwoop a CPF Concepts, LLC Brand BizPrint.This issue affects BizPrint: from n/a through 4.3.39.

  • CVE-2024-33563HigJun 9, 2024
    8theme
    Xstore
    risk 0.49cvss 7.6epss 0.00

    Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8.

  • CVE-2024-33561HigJun 9, 2024
    8theme
    Xstore
    risk 0.49cvss 7.5epss 0.00

    Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8.

  • CVE-2024-33543HigJun 9, 2024
    Codepeople
    Wp Time Slots Booking Form
    risk 0.49cvss 7.5epss 0.00

    Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.06.

  • CVE-2024-31243HigJun 9, 2024
    Bricksforge
    Bricksforge
    risk 0.49cvss 7.5epss 0.00

    Missing Authorization vulnerability in Bricksforge.This issue affects Bricksforge: from n/a through 2.0.17.

  • CVE-2024-5130HigJun 6, 2024
    Lunary
    Lunary
    risk 0.49cvss 7.5epss 0.00

    An Incorrect Authorization vulnerability exists in lunary-ai/lunary versions up to and including 1.2.2, which allows unauthenticated users to delete any dataset. The vulnerability is due to the lack of proper authorization checks in the dataset deletion endpoint. Specifically,…

  • CVE-2024-1662HigJun 5, 2024
    Porty
    Powerbank
    risk 0.49cvss 7.5epss 0.00

    Missing Authentication for Critical Function, Missing Authorization vulnerability in PORTY Smart Tech Technology Joint Stock Company PowerBank Application allows Retrieve Embedded Sensitive Data. This issue affects PowerBank Application: before 2.02.

  • CVE-2024-35672HigJun 4, 2024
    Netgsm
    Netgsm
    risk 0.49cvss 7.5epss 0.00

    Missing Authorization vulnerability in Netgsm.This issue affects Netgsm: from n/a through 2.9.19.