cve.bz

CWE-862: Missing Authorization, page 171

Filter

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

What the weakness is: CWE-862 at MITRE. OWASP Top 10: A01:2025 Broken Access Control

Related attack patterns (CAPEC): 1
  • CAPEC-665 Exploitation of Thunderbolt Protection Flaws Likelihood: Low · Severity: Very High

The attack patterns MITRE's CAPEC relates to CWE-862, as MITRE names them. Credits.

Ask an AI about CWE-862

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-862: Missing Authorization and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/862.html and https://cve.bz/cve/cwe/862?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.3CVE-2023-37394EPSS 0.3%

    Missing Authorization vulnerability in Deepak anand WP Dummy Content Generator.This issue affects WP Dummy Content Generator: from n/a through 2.3.0.

  2. 8.8CVE-2023-36695EPSS 0.4%

    Missing Authorization vulnerability in Maxime Schoeni Sublanguage.This issue affects Sublanguage: from n/a through 2.9.

  3. 6.3CVE-2023-36694EPSS 0.3%

    Missing Authorization vulnerability in Bryan Lee Kingkong Board.This issue affects Kingkong Board: from n/a through 2.1.0.2.

  4. 9.8CVE-2023-36504EPSS 0.5%

    Missing Authorization vulnerability in BBS e-Theme BBS e-Popup.This issue affects BBS e-Popup: from n/a through 2.4.5.

  5. 4.3CVE-2023-35045EPSS 0.4%

    Missing Authorization vulnerability in Fat Rat Fat Rat Collect.This issue affects Fat Rat Collect: from n/a through 2.6.7.

  6. 9.8CVE-2023-35040EPSS 0.4%

    Missing Authorization vulnerability in SendPress SendPress Newsletters.This issue affects SendPress Newsletters: from n/a through 1.23.11.6.

  7. 6.5CVE-2023-29174EPSS 0.4%

    Missing Authorization vulnerability in NervyThemes SKU Label Changer For WooCommerce.This issue affects SKU Label Changer For WooCommerce: from n/a through 3.0.

  8. 6.5CVE-2024-5674EPSS 0.3%

    The Newsletter - API v1 and v2 addon plugin for WordPress is vulnerable to unauthorized subscribers management due to PHP type juggling issue on the check_api_key function in all versions up to, and including, 2.4.5. This makes it possible…

  9. 9.8CVE-2024-4898ExploitEPSS 4.2%

    The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to arbitrary option updates due to a missing authorization checks on the REST API calls in all versions up to, and including, 0.1.0.38. This makes it p…

  10. 8.8CVE-2023-51524EPSS 0.3%

    Missing Authorization vulnerability in weForms.This issue affects weForms: from n/a through 1.6.18.

  11. 5.3CVE-2023-51413EPSS 0.3%

    Missing Authorization vulnerability in Piotnet Forms.This issue affects Piotnet Forms: from n/a through 1.0.29.

  12. 7.5CVE-2023-48280EPSS 0.4%

    Missing Authorization vulnerability in Consensu.IO Consensu.Io.This issue affects Consensu.Io: from n/a through 1.0.1.

  13. 4.3CVE-2023-47828EPSS 0.3%

    Missing Authorization vulnerability in Mandrill wpMandrill.This issue affects wpMandrill: from n/a through 1.33.

  14. 4.3CVE-2023-44234EPSS 0.3%

    Missing Authorization vulnerability in Bastianon Massimo WP GPX Map.This issue affects WP GPX Map: from n/a through 1.7.08.

  15. 5.3CVE-2023-41240EPSS 0.4%

    Missing Authorization vulnerability in Vark Pricing Deals for WooCommerce.This issue affects Pricing Deals for WooCommerce: from n/a through 2.0.3.2.

  16. 5.4CVE-2023-40672EPSS 0.4%

    Missing Authorization vulnerability in Hardik Chavada Sticky Social Media Icons.This issue affects Sticky Social Media Icons: from n/a through 2.1.

  17. 5.3CVE-2023-40603EPSS 0.4%

    Missing Authorization vulnerability in Gangesh Matta Simple Org Chart.This issue affects Simple Org Chart: from n/a through 2.3.4.

  18. 4.3CVE-2023-40209EPSS 0.3%

    Missing Authorization vulnerability in Himalaya Saxena Highcompress Image Compressor.This issue affects Highcompress Image Compressor: from n/a through 6.0.0.

  19. 4.3CVE-2023-38395EPSS 0.3%

    Missing Authorization vulnerability in Afzal Multani WP Clone Menu.This issue affects WP Clone Menu: from n/a through 1.0.1.

  20. 4.3CVE-2023-25030EPSS 0.3%

    Missing Authorization vulnerability in Buy Me a Coffee.This issue affects Buy Me a Coffee: from n/a through 3.7.

  21. 6.5CVE-2024-5468EPSS 0.4%

    The WordPress Header Builder Plugin – Pearl plugin for WordPress is vulnerable to unauthorized site option deletion due to a missing validation and capability checks on the stm_hb_delete() function in all versions up to, and including, 1.3…

  22. 6.3CVE-2023-52177EPSS 0.3%

    Missing Authorization vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.3.

  23. 6.3CVE-2023-52117EPSS 0.3%

    Missing Authorization vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid: from n/a through 5.6.6.

  24. 6.3CVE-2023-51680EPSS 0.3%

    Missing Authorization vulnerability in TechnoVama Quotes for WooCommerce.This issue affects Quotes for WooCommerce: from n/a through 2.0.1.

  25. 5.4CVE-2023-51679EPSS 0.3%

    Missing Authorization vulnerability in BulkGate BulkGate SMS Plugin for WooCommerce.This issue affects BulkGate SMS Plugin for WooCommerce: from n/a through 3.0.2.

  26. 5.4CVE-2023-51671EPSS 0.3%

    Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3.

  27. 4.3CVE-2023-51670EPSS 0.3%

    Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3.

  28. 7.3CVE-2023-51537EPSS 0.3%

    Missing Authorization vulnerability in Awesome Support Team Awesome Support.This issue affects Awesome Support: from n/a through 6.1.5.

  29. 4.3CVE-2023-51526EPSS 0.3%

    Missing Authorization vulnerability in Brett Shumaker Simple Staff List.This issue affects Simple Staff List: from n/a through 2.2.4.

  30. 8.6CVE-2024-33606EPSS 0.5%

    An attacker could retrieve sensitive files (medical images) as well as plant new medical images or overwrite existing medical images on a MicroDicom DICOM Viewer system. User interaction is required to exploit this vulnerability.

  31. 5.4CVE-2024-34815EPSS 0.4%

    Missing Authorization vulnerability in Javier Carazo Import and export users and customers import-users-from-csv-with-meta.This issue affects Import and export users and customers: from n/a through <= 1.26.5.

  32. 5.4CVE-2024-34804EPSS 0.4%

    Missing Authorization vulnerability in Tagembed.This issue affects Tagembed: from n/a through 5.8.

  33. 5.3CVE-2024-34799EPSS 0.4%

    Missing Authorization vulnerability in Repute Infosystems BookingPress.This issue affects BookingPress: from n/a through 1.0.82.

  34. 5.3CVE-2024-34768EPSS 0.4%

    Missing Authorization vulnerability in Fastly.This issue affects Fastly: from n/a through 1.2.25.

  35. 5.3CVE-2024-34763EPSS 0.4%

    Missing Authorization vulnerability in Saleswonder Team: Tobias Builder for WooCommerce reviews shortcodes – ReviewShort woo-product-reviews-shortcode.This issue affects Builder for WooCommerce reviews shortcodes – ReviewShort: from n/a th…

  36. 5.3CVE-2024-34758EPSS 0.4%

    Missing Authorization vulnerability in Wpmet WP Fundraising Donation and Crowdfunding Platform.This issue affects WP Fundraising Donation and Crowdfunding Platform: from n/a through 1.6.4.

  37. 4.3CVE-2024-32146EPSS 0.4%

    Missing Authorization vulnerability in Aspose.Cloud Marketplace Aspose.Words Exporter.This issue affects Aspose.Words Exporter: from n/a through 6.3.1.

  38. 8.8CVE-2024-32143EPSS 0.4%

    Missing Authorization vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlove Podcast Publisher: from n/a through 4.1.0.

  39. 4.3CVE-2024-23518EPSS 0.4%

    Missing Authorization vulnerability in Navneil Naicker ACF Photo Gallery Field.This issue affects ACF Photo Gallery Field: from n/a through 2.6.

  40. 4.3CVE-2023-52227EPSS 0.4%

    Missing Authorization vulnerability in MailerLite MailerLite – WooCommerce integration.This issue affects MailerLite – WooCommerce integration: from n/a through 2.0.8.

  41. 4.3CVE-2023-52224EPSS 0.6%

    Missing Authorization vulnerability in Revolut Revolut Gateway for WooCommerce.This issue affects Revolut Gateway for WooCommerce: from n/a through 4.9.7.

  42. 5.3CVE-2023-48273EPSS 0.5%

    Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Preloader for Website.This issue affects Preloader for Website: from n/a through 1.2.2.

  43. 5.3CVE-2024-34822EPSS 0.4%

    Missing Authorization vulnerability in weDevs weMail.This issue affects weMail: from n/a through 1.14.2.

  44. 5.3CVE-2024-34821EPSS 0.4%

    Missing Authorization vulnerability in Anssi Laitila Contact List contact-list.This issue affects Contact List: from n/a through <= 2.9.87.

  45. 5.3CVE-2024-34819EPSS 0.4%

    Missing Authorization vulnerability in Moreconvert Team MC Woocommerce Wishlist smart-wishlist-for-more-convert.This issue affects MC Woocommerce Wishlist: from n/a through <= 1.7.2.

  46. 5.3CVE-2024-34753EPSS 0.3%

    Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73.

  47. 4.3CVE-2024-32144EPSS 0.3%

    Missing Authorization vulnerability in Welcart Inc. Welcart e-Commerce.This issue affects Welcart e-Commerce: from n/a through 2.9.14.

  48. 5.3CVE-2024-23521EPSS 0.4%

    Missing Authorization vulnerability in Happyforms.This issue affects Happyforms: from n/a through 1.25.10.

  49. 4.3CVE-2024-23503EPSS 0.3%

    Missing Authorization vulnerability in WPManageNinja LLC Ninja Tables.This issue affects Ninja Tables: from n/a through 5.0.6.

  50. 9.8CVE-2023-52233EPSS 0.4%

    Missing Authorization vulnerability in Post SMTP Post SMTP Mailer/Email Log.This issue affects Post SMTP Mailer/Email Log: from n/a through 2.8.6.