The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
8,352 vulnerabilities with CWE-862
CVE-2024-56031
MEDIUM
Yulio Aleman Jimenez Smart Shopify Product <1.0.2 - Info Disclosure
CVSS 6.5
CVE-2024-55991
MEDIUM
WP-CRM System <= 3.2.9.1 - Missing Authorization
CVSS 6.5
CVE-2024-56234
MEDIUM
VW Automobile Lite - Info Disclosure
CVSS 5.4
CVE-2024-56227
MEDIUM
Royal Elementor Addons <= 1.7.1001 - Missing Authorization
CVSS 4.3
CVE-2024-56225
MEDIUM
Premium Addons for Elementor <= 4.10.56 - Missing Authorization
CVSS 5.4
CVE-2024-56219
MEDIUM
MarketingFire Widget Options <4.0.6.1 - Info Disclosure
CVSS 4.3
CVE-2024-56217
MEDIUM
Shahjada Download Manager <= 3.3.03 - Missing Authorization
CVSS 4.3
CVE-2024-56215
MEDIUM
Stephen Sherrard Member Directory & Contact Form <1.7.0 - Info Disc...
CVSS 4.3
CVE-2024-56211
HIGH
DeluxeThemes Userpro <5.1.9 - Info Disclosure
CVSS 8.8
CVE-2024-56512
MEDIUM
Apache NiFi 1.10.0-2.0.0 - Authenticated Missing Authorization for Parameter Contexts and Controller Services
CVSS 5.4
CVE-2024-12955
MEDIUM
PHPGurukul Blood Bank & Donor Management System 2.4 - Cross-Site Request Forgery in /logout.php
CVSS 4.3
CVE-2024-11281
CRITICAL
WooCommerce Point of Sale <6.1.0 - Privilege Escalation
CVSS 9.8
CVE-2024-12413
MEDIUM
MarketKing - Ultimate WooCommerce Multivendor Marketplace Solution ...
CVSS 5.3
CVE-2024-12190
MEDIUM
The Contact Form by Bit Form <2.17.3 - Info Disclosure
CVSS 4.3
CVE-2024-12881
HIGH
The PlugVersions - WordPress <0.0.8 - File Upload
CVSS 8.8
CVE-2024-12594
HIGH
WordPress <7.1.1 - Privilege Escalation
CVSS 8.8
CVE-2024-12210
MEDIUM
Print Invoice & Delivery Notes for WooCommerce <5.4.0 - Info Disclo...
CVSS 4.3
CVE-2024-12617
MEDIUM
WC Price History for Omnibus - Info Disclosure
CVSS 5.4
CVE-2024-12266
MEDIUM
ELEX WooCommerce Dynamic Pricing - Info Disclosure
CVSS 6.5
CVE-2024-11852
MEDIUM
Elementor Addons <5.10.12 - Info Disclosure
CVSS 4.3
CVE-2024-12558
MEDIUM
WP BASE Booking <4.9.2 - Info Disclosure
CVSS 6.5
CVE-2024-56349
MEDIUM
JetBrains TeamCity < 2024.12 - Unauthenticated Build Log Modification
CVSS 5.3
CVE-2024-12331
MEDIUM
File Manager Pro - Filester <= 1.8.6 - Authenticated Arbitrary Plugin Installation via ajax_install_plugin
CVSS 4.3
CVE-2024-56048
HIGH
VibeThemes WPLMS < 1.9.9 - Unauthenticated Arbitrary Option Update
CVSS 8.8
CVE-2024-54381
HIGH
theDotstore Advance Menu Manager <3.1.1 - Info Disclosure
CVSS 7.1
Details
Vulnerabilities
8,352
Exploit Likelihood
High