CWE-285

1,461 vulnerabilities with CWE-285

CVE-2025-10731 MEDIUM

ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 - Unauthenticated Sensitive Information Exposure to Data Export

CVSS 5.3

CVE-2025-10736 MEDIUM

ReviewX <= 2.2.10 - Unauthenticated Data Access via userAccessibility()

CVSS 6.5

CVE-2025-15582 MEDIUM

detronetdip E-commerce 1.0.0 - Auth Bypass

CVSS 5.4

CVE-2025-71242 MEDIUM

SPIP <4.3.6/4.2.17/4.1.20 - Info Disclosure

CVSS 6.5

CVE-2025-4521 HIGH

IDonate WordPress Plugin 2.1.5-2.1.9 - Privilege Escalation

CVSS 8.8

CVE-2025-43403 MEDIUM

macOS <15.7.4/<14.8.4 - Info Disclosure

CVSS 5.5

CVE-2025-30508 MEDIUM

Intel(R) Quick Assist Technology - DoS

CVSS 6.5

CVE-2025-59100 MEDIUM

SQLite Database Export - Info Disclosure

CVE-2025-14348 MEDIUM

weMail < 2.0.7 - Unauthenticated Authorization Bypass via x-wemail-user Header

CVSS 5.3

CVE-2025-67603 MEDIUM

Foomuuri < 0.31 - Improper Authorization

CVE-2025-12958 LOW

Rankology SEO & Analytics Tool <2.0 - Info Disclosure

CVSS 2.7

CVE-2025-9294 MEDIUM

Quiz and Survey Master (QSM) <= 10.3.1 - Authenticated Unauthorized Data Deletion via qsm_dashboard_delete_result

CVSS 4.3

CVE-2025-61781 HIGH

OpenCTI < 6.8.1 - Unauthenticated Authorization Bypass via WorkspacePopoverDeletionMutation

CVSS 7.1

CVE-2025-15213 MEDIUM

Student File Management System 1.0 - Improper Authorization via File Download Handler

CVSS 4.3

CVE-2025-15126 LOW

JeecgBoot < 3.9.0 - Improper Authorization via PositionId Argument in getPositionUserList

CVSS 3.1

CVE-2025-15125 LOW

JeecgBoot < 3.9.0 - Improper Authorization via departId Parameter in queryDepartPermission

CVSS 3.1

CVE-2025-15124 LOW

JeecgBoot < 3.9.0 - Improper Authorization via departId Parameter in sysDepartPermission

CVSS 3.1

CVE-2025-15123 LOW

JeecgBoot < 3.9.0 - Improper Authorization via /sys/sysDepartPermission/datarule/

CVSS 3.1

CVE-2025-15122 LOW

JeecgBoot < 3.9.0 - Improper Authorization via DepartId/RoleId Manipulation

CVSS 3.1

CVE-2025-15120 LOW

JeecgBoot < 3.9.0 - Improper Authorization via getDeptRoleList departId Parameter

CVSS 3.1

CVE-2025-15119 LOW

JeecgBoot < 3.9.0 - Improper Authorization in sys/sysDepartRole/list deptId Parameter

CVSS 3.1

CVE-2025-15118 MEDIUM

macrozheng mall < 1.0.3 - Improper Authorization in Member Address Update Endpoint

CVSS 4.3

CVE-2025-15106 MEDIUM

maxun < 0.0.28 - Improper Authorization via Authentication Endpoint

CVSS 6.3

CVE-2025-15087 MEDIUM

youlai-mall 1.0.0/2.0.0 - Improper Authorization via OrderController submitOrderPayment

CVSS 4.3

CVE-2025-15085 MEDIUM

youlai-mall 1.0.0/2.0.0 - Incorrect Privilege Assignment in Balance Handler

CVSS 4.3