CWE-639

High likelihood

Authorization Bypass Through User-Controlled Key

Parent: CWE-863 - Incorrect Authorization

The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

1,574 vulnerabilities with CWE-639
CVE-2024-13429 MEDIUM
WP Job Portal - Insecure Direct Object Reference
CVSS 4.3
CVE-2024-13428 MEDIUM
WP Job Portal <2.2.6 - Insecure Direct Object Reference
CVSS 5.3
CVE-2024-13425 MEDIUM
WP Job Portal <2.2.6 - Insecure Direct Object Reference
CVSS 4.3
CVE-2024-13372 MEDIUM
WP Job Portal <2.2.6 - Insecure Direct Object Reference
CVSS 5.3
CVE-2024-12102 MEDIUM
Seventhqueen Typer Core < 1.9.6 - IDOR
CVSS 4.3
CVE-2024-13694 HIGH
Moreconvert Woocommerce Wishlist < 1.8.8 - Improper Authorization
CVSS 7.5
CVE-2024-13457 MEDIUM
WordPress - Insecure Direct Object Reference
CVSS 5.3
CVE-2024-10497 HIGH
Device - Privilege Escalation
CVSS 8.8
CVE-2024-11146 MEDIUM
TrueFiling <3.1.112.19 - Info Disclosure
CVSS 6.3
CVE-2024-10775 MEDIUM
Piotnet Addons For Elementor <2.4.32 - Info Disclosure
CVSS 4.3
CVE-2024-12116 MEDIUM
Unlimited Theme Addon For Elementor & WooCommerce <1.2.1 - Info Dis...
CVSS 4.3
CVE-2024-11915 MEDIUM
Elementor <1.1.0 - Info Disclosure
CVSS 4.3
CVE-2024-42169 HIGH
Hcltech Dryice Myxalytics - IDOR
CVSS 7.1
CVE-2024-12472 MEDIUM
Metaphorcreations Post Duplicator < 2.37 - IDOR
CVSS 4.3
CVE-2024-10215 CRITICAL
WPBookit <1.6.4 - Privilege Escalation
CVSS 9.8
CVE-2024-44450 MEDIUM
AIMS eCrew - Auth Bypass
CVSS 5.4
CVE-2024-12131 MEDIUM
Wpjobportal WP Job Portal < 2.2.6 - IDOR
CVSS 4.3
CVE-2024-12132 MEDIUM
Wpjobportal WP Job Portal < 2.2.5 - IDOR
CVSS 4.3
CVE-2024-13040 HIGH
Quanta Computer - Auth Bypass
CVSS 8.8
CVE-2024-52294 MEDIUM
Khoj <1.29.10 - IDOR
CVSS 4.3
CVE-2024-12335 MEDIUM
Theme-fusion Avada Builder < 3.11.12 - IDOR
CVSS 4.3
CVE-2024-12103 MEDIUM
Content No Cache: prevent specific content from being cached <0.1.2...
CVSS 5.3
CVE-2024-10797 MEDIUM
Elementor <1.0.7 - Info Disclosure
CVSS 4.3
CVE-2024-55471 MEDIUM
Nuget Oqtane.framework - IDOR
CVSS 6.5
CVE-2024-55186 MEDIUM
Nuget Oqtane.framework - IDOR
CVSS 4.3
Details
Vulnerabilities 1,574
Exploit Likelihood High