The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
8,346 vulnerabilities with CWE-862
CVE-2024-13371
MEDIUM
WP Job Portal <2.2.6 - Info Disclosure
CVSS 5.3
CVE-2024-12825
MEDIUM
Custom Related Posts <= 1.7.3 - Authenticated Unauthorized Data Access and Modification via AJAX Actions
CVSS 5.4
CVE-2024-13651
MEDIUM
RapidLoad <= 2.4.4 - Authenticated Settings Modification via Missing Capability Check
CVSS 4.3
CVE-2024-13343
HIGH
WooCommerce Customers Manager <31.3 - Privilege Escalation
CVSS 8.8
CVE-2024-12620
MEDIUM
AnimateGL Animations for WordPress < 1.4.23 - Unauthenticated Settings Modification via agl_json AJAX Action
CVSS 5.3
CVE-2024-12184
MEDIUM
Contact Forms by Cimatti <= 1.9.4 - Unauthenticated Arbitrary File Download via accua_forms_download_submitted_file()
CVSS 5.3
CVE-2024-12171
HIGH
Elula Wsdesk < 3.2.7 - Missing Authorization
CVSS 8.8
CVE-2024-13530
MEDIUM
WordPress <7.1.1 - Privilege Escalation
CVSS 4.3
CVE-2024-13717
MEDIUM
vcita plugin <2.7.1 - Privilege Escalation
CVSS 4.3
CVE-2024-13424
MEDIUM
Ni Sales Commission For WooCommerce <1.2.4 - Auth Bypass
CVSS 4.3
CVE-2024-13415
MEDIUM
Food Menu & Online Ordering - WooCommerce <5.1.4 - Privilege Escala...
CVSS 4.3
CVE-2024-13767
HIGH
Live2DWebCanvas <1.9.11 - Privilege Escalation
CVSS 8.1
CVE-2024-13715
MEDIUM
zStore Manager Basic <= 3.311 - Authenticated Cache Clearing via Missing Capability Check
CVSS 4.3
CVE-2024-13652
MEDIUM
ECPay Ecommerce for WooCommerce <= 1.1.2411060 - Authenticated Data Deletion via clear_ecpay_debug_log AJAX Action
CVSS 4.3
CVE-2024-12822
CRITICAL
Media Manager for UserPro < 3.11.0 - Unauthenticated Arbitrary Option Update via add_capto_img()
CVSS 9.8
CVE-2024-12821
HIGH
Media Manager for UserPro < 3.12.0 - Authenticated Arbitrary Option Update via upm_upload_media()
CVSS 8.8
CVE-2024-12269
HIGH
Safe Ai Malware Protection for WP <= 1.0.17 - Unauthenticated Database Export via export_db() Function
CVSS 7.5
CVE-2024-12129
HIGH
Royal Core < 2.9.2 - Authenticated Privilege Escalation via Missing Capability Check
CVSS 8.8
CVE-2024-11583
MEDIUM
Borderless < 1.5.9 - Authenticated Arbitrary File Deletion via remove_zipped_font Function
CVSS 4.3
CVE-2024-10591
HIGH
MWB HubSpot for WooCommerce < 1.6.0 - Authenticated Privilege Escalation via Missing Capability Check
CVSS 8.8
CVE-2024-40677
HIGH
AdvancedPowerUsageDetail - Privilege Escalation
CVSS 8.4
CVE-2024-54542
CRITICAL
Safari < 18.2 - Unauthenticated Private Browsing Tab Access
CVSS 9.1
CVE-2024-11936
HIGH
Zox News <3.16.0 - Privilege Escalation
CVSS 8.8
CVE-2024-10574
HIGH
WordPress Quiz Maker Business/Dev/Agcy <8.8.0/<21.8.0/<31.8.0 - Inf...
CVSS 7.2
CVE-2024-13449
MEDIUM
Boom Fest <= 2.2.1 - Authenticated Unauthorized Data Modification via bf_admin_action Function
CVSS 4.3
Details
Vulnerabilities
8,346
Exploit Likelihood
High