The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
8,331 vulnerabilities with CWE-862
CVE-2025-47480
MEDIUM
Iqonic Design Graphina <3.0.4 - Info Disclosure
CVSS 5.4
CVE-2025-47472
MEDIUM
Music Player for WooCommerce <1.5.1 - Info Disclosure
CVSS 5.4
CVE-2025-47471
MEDIUM
Envo Extra <= 1.9.9 - Missing Authorization
CVSS 4.3
CVE-2025-47469
MEDIUM
slui Media Hygiene <4.0.0 - Info Disclosure
CVSS 5.4
CVE-2025-47467
MEDIUM
GS Testimonial Slider <= 3.3.0 - Missing Authorization
CVSS 4.3
CVE-2025-47465
MEDIUM
Blocksy <= 2.0.97 - Missing Authorization
CVSS 4.9
CVE-2025-47457
MEDIUM
dgamoni LocateAndFilter <1.6.16 - Info Disclosure
CVSS 5.3
CVE-2025-47450
MEDIUM
Mitchell Bennis Simple File List <6.1.13 - Info Disclosure
CVSS 5.3
CVE-2025-3766
MEDIUM
Login Lockdown & Protection <2.11 - CSRF
CVSS 5.4
CVE-2025-2821
MEDIUM
Search Exclude <2.4.9 - Info Disclosure
CVSS 5.3
CVE-2025-0856
HIGH
PGS Core <= 5.8.0 - Unauthenticated Missing Authorization
CVSS 7.3
CVE-2025-4327
MEDIUM
MRCMS 3.1.2 - Cross-Site Request Forgery
CVSS 4.3
CVE-2025-46586
MEDIUM
HarmonyOS - Missing Authorization in Contacts Module
CVSS 5.1
CVE-2025-4282
MEDIUM
SourceCodester/oretnom23 Stock Management System 1.0 - CSRF
CVSS 4.3
CVE-2025-3927
CRITICAL
Digigram's PYKO-OUT AoIP - Info Disclosure
CVSS 9.8
CVE-2025-1326
MEDIUM
Homey < 2.4.4 - Authenticated Arbitrary Reservation Deletion via homey_reservation_del()
CVSS 4.3
CVE-2025-4179
HIGH
Flynax Bridge < 2.2.0 - Unauthenticated Privilege Escalation via registerUser() Function
CVSS 7.3
CVE-2025-4177
MEDIUM
Flynax Bridge < 2.2.0 - Unauthenticated Arbitrary User Deletion via deleteUser() Function
CVSS 5.3
CVE-2025-3746
CRITICAL
WordPress OTP-less one tap Sign in <2.0.59 - Privilege Escalation
CVSS 9.8
CVE-2025-3952
HIGH
Projectopia - WordPress Project Management <5.1.16 - DoS
CVSS 8.1
CVE-2025-1304
HIGH
NewsBlogger < 0.2.5.1 - Authenticated Arbitrary File Upload via newsblogger_install_and_activate_plugin()
CVSS 8.8
CVE-2025-2816
HIGH
Page View Count 2.8.0-2.8.4 - Authenticated Denial of Service via Missing Capability Check
CVSS 8.1
CVE-2025-46557
CRITICAL
XWiki <15.10.14, <16.4.6, <16.10.0-rc-1 - Privilege Escalation
CVSS 9.8
CVE-2025-46554
MEDIUM
XWiki <14.10.22, <15.10.12, <16.4.3, <16.7.0 - Info Disclosure
CVSS 5.3
CVE-2025-39413
MEDIUM
Simple Sitemap < 3.6.0 - Missing Authorization
CVSS 4.3
Details
Vulnerabilities
8,331
Exploit Likelihood
High