CWE-862

8,261 vulnerabilities with CWE-862

CVE-2025-13348 HIGH

ASUS Secure Delete Driver - Path Traversal

CVE-2025-15510 MEDIUM

NEX-Forms - Ultimate Forms Plugin for WordPress <= 9.1.8 - Unauthenticated Sensitive Data Exposure via Form Export

CVSS 5.3

CVE-2025-68479 HIGH

Discourse < 3.5.4, 2025.11.2, 2025.12.1, 2026.1.0 - Missing Authorization in Subscription Endpoints

CVSS 7.1

CVE-2025-15511 MEDIUM

Rupantorpay <2.0.0 - Info Disclosure

CVSS 5.3

CVE-2025-14386 HIGH

Search Atlas SEO 2.4.4-2.5.12 - Authentication Bypass via Missing Capability Check

CVSS 8.8

CVE-2025-14971 MEDIUM

Link Invoice Payment for WooCommerce <2.8.0 - Info Disclosure

CVSS 5.3

CVE-2025-15516 MEDIUM

All-in-One Video Gallery <4.6.4 - Info Disclosure

CVSS 4.3

CVE-2025-14843 MEDIUM

Wizit Gateway for WooCommerce - Unauthenticated RCE

CVSS 5.3

CVE-2025-14629 MEDIUM

Alchemist Ajax Upload <1.1 - Info Disclosure

CVSS 5.3

CVE-2025-14609 MEDIUM

Wise Analytics <1.1.9 - Info Disclosure

CVSS 5.3

CVE-2025-52024 CRITICAL

Aptsys POS Platform Web Services < 2025-05-28 - Unauthenticated API Exposure via Internal Testing Tools

CVSS 9.4

CVE-2025-70986 HIGH

RuoYi 4.8.2 - Unauthenticated Sensitive Data Exposure via selectDept Function

CVSS 7.5

CVE-2025-70985 CRITICAL

RuoYi 4.8.2 - Unauthenticated Improper Access Control in Update Function

CVSS 9.1

CVE-2025-70983 CRITICAL

SpringBlade 4.5.0 - Privilege Escalation via Incorrect Access Control in authRoutes

CVSS 9.9

CVE-2025-14947 MEDIUM

All-in-One Video Gallery <4.6.4 - Info Disclosure

CVSS 6.5

CVE-2025-13921 MEDIUM

weDocs <= 2.1.16 - Authenticated Arbitrary Documentation Post Modification

CVSS 4.3

CVE-2025-69315 MEDIUM

NSquared Simply Schedule Appointments <1.6.9.15 - Info Disclosure

CVSS 6.5

CVE-2025-69313 HIGH

WPXPO PostX <5.0.3 - Info Disclosure

CVSS 7.5

CVE-2025-69311 HIGH

Broadstreet Ads <= 1.52.1 - Missing Authorization

CVSS 7.6

CVE-2025-69300 MEDIUM

Leap13 Premium Addons for Elementor <4.11.63 - Info Disclosure

CVSS 5.4

CVE-2025-69193 HIGH

e-plugins WP Membership <= 1.6.4 - Missing Authorization

CVSS 7.3

CVE-2025-69192 HIGH

e-plugins Real Estate Pro <= 2.1.5 - Info Disclosure

CVSS 7.3

CVE-2025-69191 HIGH

e-plugins ListingHub <= 1.2.7 - Missing Authorization

CVSS 7.3

CVE-2025-69190 HIGH

Listihub <= 1.0.6 - Missing Authorization

CVSS 7.3

CVE-2025-69188 HIGH

e-plugins fitness-trainer <= 1.7.1 - Info Disclosure

CVSS 7.3