CWE-862

8,343 vulnerabilities with CWE-862

CVE-2025-30605 MEDIUM

ldwin79 sourceplay-navermap <0.0.2 - Info Disclosure

CVSS 4.3

CVE-2025-30592 MEDIUM

westerndeal Advanced Dewplayer <1.6 - RCE

CVSS 5.3

CVE-2025-30591 MEDIUM

Music Press Pro <1.4.6 - Info Disclosure

CVSS 5.3

CVE-2025-30581 MEDIUM

PluginOps Top Bar <= 3.3 - Missing Authorization

CVSS 5.3

CVE-2025-30543 MEDIUM

Menu Duplicator <1.0 - Privilege Escalation

CVSS 4.3

CVE-2025-1408 MEDIUM

ProfileGrid <= 5.9.4.4 - Authenticated Unauthorized Group Request Modification

CVSS 4.3

CVE-2025-2589 MEDIUM

code-projects Human Resource Management System 1.0.1 - Incorrect Privilege Assignment via user_cookie Argument

CVSS 5.5

CVE-2025-26853 CRITICAL

DESCOR INFOCAD < 3.5.2.0 - Missing Authorization

CVSS 10.0

CVE-2025-1766 MEDIUM

Eventin plugin <4.0.24 - Info Disclosure

CVSS 5.3

CVE-2025-29926 CRITICAL

XWiki Platform <15.10.15, <16.4.6, <16.10.0 - Info Disclosure

CVSS 9.8

CVE-2025-2290 MEDIUM

LifterLMS < 8.0.1 - Unauthenticated Post Trashing via Missing Capability Check

CVSS 5.3

CVE-2025-30107 HIGH

IROAD V9 - Unauthenticated Missing Authorization

CVSS 7.5

CVE-2025-2262 HIGH

Logo Slider <= 3.7.3 - Unauthenticated Arbitrary Shortcode Execution

CVSS 7.3

CVE-2025-2420 MEDIUM

i Morning < bc782730c74ff080494f145cc363a0b4f43f7d3e - Cross-Site Request Forgery

CVSS 4.3

CVE-2025-26969 HIGH

Aldo Latino PrivateContent <8.11.5 - Info Disclosure

CVSS 8.3

CVE-2025-26961 HIGH

NotFound Fresh Framework <1.70.0 - Info Disclosure

CVSS 8.6

CVE-2025-2025 MEDIUM

GiveWP <= 3.22.0 - Unauthenticated Sensitive Information Disclosure

CVSS 6.5

CVE-2025-2267 MEDIUM

WP01 < 2.6.2 - Authenticated Arbitrary File Download via make_archive() Function

CVSS 6.5

CVE-2025-1668 MEDIUM

WPSchoolPress <= 2.2.16 - Authenticated Arbitrary User Deletion via wpsp_DeleteUser()

CVSS 4.3

CVE-2025-1667 HIGH

WPSchoolPress <= 2.2.16 - Authenticated Privilege Escalation via wpsp_UpdateTeacher Function

CVSS 8.8

CVE-2025-1657 HIGH

uListing < 2.2.0 - Authenticated PHP Object Injection & Data Modification via stm_listing_ajax

CVSS 8.8

CVE-2025-1507 MEDIUM

ShareThis Dashboard for Google Analytics <= 3.2.1 - Unauthenticated Data Modification via handle_actions()

CVSS 5.3

CVE-2025-2289 MEDIUM

Zegen - Church WordPress Theme <= 1.1.9 - Authenticated Missing Authorization on AJAX Endpoints

CVSS 4.3

CVE-2025-2103 HIGH

SoundRise Music <1.6.11 - Privilege Escalation

CVSS 8.8

CVE-2025-0952 HIGH

Eco Nature - Environment & Ecology WordPress Theme <2.0.4 - DoS

CVSS 8.1