CWE-862

8,331 vulnerabilities with CWE-862

CVE-2025-24757 MEDIUM

Long Watch Studio MyRewards <5.4.13.1 - XSS

CVSS 5.3

CVE-2025-24748 MEDIUM

LambertGroup All In One Slider Responsive <3.7.9 - SQL Injection

CVSS 5.3

CVE-2025-6814 HIGH

Booking X < 1.1.2 - Unauthenticated Sensitive Data Exposure via export_now()

CVSS 7.5

CVE-2025-5956 MEDIUM

WP Human Resource Management 2.0.0-2.2.17 - Authenticated Arbitrary User Deletion via ajax_delete_employee()

CVSS 6.5

CVE-2025-5953 HIGH

WP Human Resource Management 2.0.0-2.2.17 - Authenticated Privilege Escalation

CVSS 8.8

CVE-2025-52554 MEDIUM

n8n < 1.99.1 - Authenticated Workflow Execution Termination via /rest/executions/:id/stop Endpoint

CVSS 4.3

CVE-2025-3702 MEDIUM

Melapress File Monitor <2.2.0 - Info Disclosure

CVSS 5.4

CVE-2025-27461 HIGH

Endress MEAC300-FNADE4 Firmware - Unauthenticated Automatic Login

CVSS 7.6

CVE-2025-53108 MEDIUM

HomeBox <0.20.1 - Privilege Escalation

CVE-2025-39362 MEDIUM

Mollie Mollie Payments for WooCommerce <8.0.2 - Info Disclosure

CVSS 6.5

CVE-2025-5692 MEDIUM

Lead Form Data Collection to CRM < 3.1 - Authenticated Missing Authorization in AJAX Functions

CVSS 6.3

CVE-2025-46259 MEDIUM

POSIMYTH Innovation The Plus Addons for Elementor Pro <6.3.7 - Info...

CVSS 5.4

CVE-2025-6865 MEDIUM

daicuo < 1.3.13 - Cross-Site Request Forgery via /admin.php/addon/index

CVSS 4.3

CVE-2025-6864 MEDIUM

SeaCMS < 13.2 - Cross-Site Request Forgery in /admin_type.php

CVSS 4.3

CVE-2025-5304 CRITICAL

PT Project Notebooks 1.0.0-1.1.3 - Unauthenticated Privilege Escalation via wpnb_pto_new_users_add()

CVSS 9.8

CVE-2025-53323 MEDIUM

danbriapps Pre-Publish Post Checklist <3.1 - Info Disclosure

CVSS 4.3

CVE-2025-53318 MEDIUM

WPManiax WP DB Booster <1.0.1 - Info Disclosure

CVSS 5.4

CVE-2025-53304 MEDIUM

Rohil Contact Form <1.1.4 - Info Disclosure

CVSS 5.3

CVE-2025-53295 MEDIUM

iCount Payment Gateway <2.0.6 - Info Disclosure

CVSS 5.3

CVE-2025-53293 MEDIUM

Morten Dalgaard Johansen Dashboard Widget Sidebar <1.2.3 - Info Dis...

CVSS 4.3

CVE-2025-53288 MEDIUM

PlatiOnline Payments <6.3.2 - Info Disclosure

CVSS 4.3

CVE-2025-53284 MEDIUM

Pankaj Sakaria CMS Blocks <1.1 - RCE

CVSS 6.5

CVE-2025-53266 MEDIUM

EdwardBock Cron Logger <1.3.0 - RCE

CVSS 4.3

CVE-2025-53255 MEDIUM

HurryTimer <2.13.1 - Info Disclosure

CVSS 5.3

CVE-2025-53200 MEDIUM

QuantumCloud ChatBot <6.7.3 - Info Disclosure

CVSS 4.3