The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
8,261 vulnerabilities with CWE-862
CVE-2025-68003
MEDIUM
renatoatshown Shown Connector <= 1.2.10 - Info Disclosure
CVSS 6.5
CVE-2025-67967
HIGH
e-plugins Lawyer Directory <= 1.3.3 - Missing Authorization
CVSS 7.6
CVE-2025-67958
MEDIUM
TaxCloud for WooCommerce <8.3.8 - RCE
CVSS 6.5
CVE-2025-67956
HIGH
User Registration <= 4.4.6 - Missing Authorization
CVSS 8.2
CVE-2025-67942
MEDIUM
Peach Payments Gateway <3.3.6 - RCE
CVSS 6.5
CVE-2025-67939
MEDIUM
Tickera <= 3.5.6.2 - Missing Authorization
CVSS 6.5
CVE-2025-66143
MEDIUM
Crumber <= 1.0.10 - Missing Authorization
CVSS 5.4
CVE-2025-66142
MEDIUM
Merkulove Comparimager for Elementor <= 1.0.1 - Info Disclosure
CVSS 5.4
CVE-2025-66141
MEDIUM
Merkulove Scroller <2.0.2 - Info Disclosure
CVSS 5.4
CVE-2025-66140
MEDIUM
Merkulove Uper for Elementor <1.0.6 - Info Disclosure
CVSS 5.4
CVE-2025-66139
MEDIUM
Merkulove Audier For Elementor <1.0.10 - RCE
CVSS 5.4
CVE-2025-66138
MEDIUM
Merkulove Motionger for Elementor <2.0.5 - RCE
CVSS 5.4
CVE-2025-66137
MEDIUM
Merkulove Searcher for Elementor <1.0.4 - RCE
CVSS 5.4
CVE-2025-66136
MEDIUM
Merkulove Carter for Elementor <1.0.3 - Info Disclosure
CVSS 5.4
CVE-2025-66135
MEDIUM
Merkulove Imager for Elementor <2.0.5 - Info Disclosure
CVSS 5.4
CVE-2025-63018
MEDIUM
wproyal Bard <= 2.229 - Missing Authorization
CVSS 4.3
CVE-2025-62754
MEDIUM
bKash for WC <3.1.0 - Privilege Escalation
CVSS 5.3
CVE-2025-62106
MEDIUM
Mario Peshev WP-CRM System <3.4.5 - Info Disclosure
CVSS 5.4
CVE-2025-5805
MEDIUM
Ninetheme Electron <= 1.8.2 - Missing Authorization
CVSS 6.5
CVE-2025-54002
MEDIUM
Jthemes xSmart <= 1.2.9.4 - Missing Authorization
CVSS 6.5
CVE-2025-49375
MEDIUM
cozythemes HomeLancer <1.0.2 - Info Disclosure
CVSS 5.4
CVE-2025-65098
HIGH
typebot < 3.13.2 - Unauthenticated Credential Theft via Malicious Typebot Preview
CVSS 7.4
CVE-2025-15347
HIGH
The Creator LMS - Privilege Escalation
CVSS 8.8
CVE-2025-15043
MEDIUM
The Events Calendar <6.15.13 - Privilege Escalation
CVSS 5.4
CVE-2025-14798
MEDIUM
LearnPress - WordPress LMS Plugin <4.3.2.4 - Info Disclosure
CVSS 5.3
Details
Vulnerabilities
8,261
Exploit Likelihood
High