cve.bz

OWASP A01:2025 Broken Access Control vulnerabilities, newest first, page 112

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A01:2025 at MITRE.

Its weaknesses: 40

CWE-22, CWE-23, CWE-36, CWE-59, CWE-61, CWE-65, CWE-200, CWE-201, CWE-219, CWE-276, CWE-281, CWE-282, CWE-283, CWE-284, CWE-285, CWE-352, CWE-359, CWE-377, CWE-379, CWE-402, CWE-424, CWE-425, CWE-441, CWE-497, CWE-538, CWE-540, CWE-548, CWE-552, CWE-566, CWE-601, CWE-615, CWE-639, CWE-668, CWE-732, CWE-749, CWE-862, CWE-863, CWE-918, CWE-922, CWE-1275

  1. 4.3CVE-2026-97074EPSS 0.2%

    Subscriber Insecure Direct Object References (IDOR) in Newsletters, Email Marketing, SMS and Popups by Omnisend <= 1.9.0 versions.

  2. 5.3CVE-2026-97066EPSS 0.2%

    Unauthenticated Insecure Direct Object References (IDOR) in GiveWP <= 4.16.9 versions.

  3. 8.8CVE-2026-96838EPSS 0.1%

    Unauthenticated Cross Site Request Forgery (CSRF) in Blacklist Manager &#8211; WooCommerce Anti-Fraud, Blacklist &amp; Checkout Verification <= 2.3.1 versions.

  4. 6.5CVE-2026-96834EPSS 0.3%

    Subscriber Sensitive Data Exposure in GiveWP <= 4.16.9 versions.

  5. 6.8CVE-2026-96824EPSS 0.4%

    Editor Arbitrary File Deletion in Template Kit – Import <= 1.0.16 versions.

  6. 7.5CVE-2026-96823EPSS 0.3%

    Unauthenticated Arbitrary Content Deletion in Customer Reviews for WooCommerce <= 5.120.0 versions.

  7. 7.5CVE-2026-96818EPSS 0.2%

    Unauthenticated Broken Access Control in WP Express Checkout (Accept PayPal Payments) <= 2.4.9 versions.

  8. 8.2CVE-2026-96817EPSS 0.4%

    Subscriber Broken Access Control in MakeCommerce for WooCommerce <= 4.1.0 versions.

  9. 7.5CVE-2026-96348EPSS 0.3%

    Unauthenticated Broken Access Control in Bookly <= 28.2 versions.

  10. 6.5CVE-2026-96347EPSS 0.3%

    Subscriber Insecure Direct Object References (IDOR) in Bookly <= 28.2 versions.

  11. 7.5CVE-2026-95587EPSS 0.3%

    Unauthenticated Broken Access Control in Hostinger Migrator <= 1.0 versions.

  12. 5.3CVE-2026-94673EPSS 0.2%

    Unauthenticated Insecure Direct Object References (IDOR) in Simply Schedule Appointments <= 1.6.12.31 versions.

  13. 4.3CVE-2026-94672EPSS 0.2%

    Contributor Insecure Direct Object References (IDOR) in Safe SVG <= 2.5.0 versions.

  14. 7.1CVE-2026-94499EPSS 0.3%

    Subscriber Broken Access Control in FormGent <= 1.12.2 versions.

  15. 5.4CVE-2026-94173EPSS 0.2%

    Contributor Insecure Direct Object References (IDOR) in Business Directory <= 6.4.27 versions.

  16. 7.5CVE-2026-94123EPSS 0.4%

    Unauthenticated Arbitrary File Download in NextGEN Gallery <= 4.5.0 versions.

  17. 7.5CVE-2026-94120EPSS 0.3%

    Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms <= 2.7.2 versions.

  18. 6.5CVE-2026-94074EPSS 0.2%

    Unauthenticated Broken Access Control in Simply Schedule Appointments <= 1.6.12.29 versions.

  19. 9.2CVE-2026-74865EPSS 0.4%

    sogo_yhn configures SOGo with a parameter "SOGoTrustProxyAuthentication=YES". This causes the password to be bypassed during HTTP Basic authentication. An unauthenticated attacker who provides the username of an existing user and any arbit…

  20. 9.3CVE-2026-74864EPSS 0.4%

    sogo_yhn configures SOGo with a parameter that forces the request with HTTP header "x-webobjects-remote-user" to be treated as sent by a verified user without performing password validation. Since Nginx does not strip this header, any clie…

  21. 5.4CVE-2026-62081EPSS 0.2%

    Contributor Insecure Direct Object References (IDOR) in Flexible PDF Coupons <= 1.14.11 versions.

  22. 5.4CVE-2026-102399EPSS 0.1%

    Unauthenticated Cross Site Request Forgery (CSRF) in Photo Gallery by Supsystic <= 1.21.0 versions.

  23. 8.5CVE-2026-10739EPSS 0.1%

    Cato Networks SDP Client for Windows before 6.12.6 allows a local user to delete arbitrary files with SYSTEM privileges via improper validation of a client-supplied SID over a local IPC named pipe.

  24. 6.9CVE-2026-96342EPSS 0.2%

    Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Retrieve Embedded Sensitive Data.This issue affects WPMobile.App: from n/a through 11.83.

  25. 5.4CVE-2026-13720EPSS 0.2%

    An Editor can set file-provisioning metadata (the grafana.app/managedBy, grafana.app/managerId and grafana.app/sourcePath annotations) when creating a dashboard through the dashboard API, because these fields were stored without an authori…

  26. 4.3CVE-2026-13719EPSS 0.2%

    An authenticated user can list alert rules stored in folders they are not allowed to read through the alert rules API list endpoint. When the set of folders the user may read was empty, the folder restriction was dropped and every alert ru…

  27. 8.6CVE-2026-103239EPSS 0.3%

    MISP contains a privilege escalation vulnerability in the tag collection creation and editing functionality. The affected actions accepted the full HTTP request payload and passed it to a bulk-association save operation, which writes not o…

  28. 8.3CVE-2026-103237EPSS 0.2%

    MISP contains an improper input validation vulnerability in its ORM save path. When a user submits data through various endpoints (attribute add/edit, event edit, free-text import, sighting capture, shadow attribute proposal, event report …

  29. 8.7CVE-2026-103235EPSS 0.3%

    MISP contains a mass assignment vulnerability in the event delegation feature. When a user with delegation permission submits a delegation request, the application authorized the user against the event identified in the URL but then persis…

  30. 7.5CVE-2026-75098EPSS 0.9%

    The Product Designer App plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.3 via the 'svg' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of …

  31. 4.3CVE-2026-102584EPSS 0.2%

    A flaw was found in Moodle. Due to a missing capability check, a low-privileged authenticated user can trigger the recalculation of grade penalties without holding the required permissions. This issue allows unauthorized users to modify gr…

  32. 2.7CVE-2026-102583EPSS 0.2%

    A flaw was found in Moodle. An incorrect capability check in the artificial intelligence (AI) editor placement's image generation web service allows an authenticated user to invoke the feature without holding the required capability. This …

  33. 4.3CVE-2026-102582EPSS 0.2%

    A flaw was found in Moodle. The manual enrolment management page did not properly check whether the manual enrolment plugin was disabled, allowing users with enrolment permissions to access the page directly by navigating to its URL. Conse…

  34. 4.3CVE-2026-102579EPSS 0.2%

    A flaw was found in Moodle. An incorrect capability check in the grade web service allows an authenticated student to access profile information of other students enrolled in the same course that they should not have permission to view. Th…

  35. 4.3CVE-2026-102577EPSS 0.2%

    A flaw was found in Moodle. Incorrect handling of IPv4-mapped IPv6 addresses within the URL downloader's host-blocking logic allows an authenticated remote user to bypass blocked-host restrictions. By supplying a crafted URL, an attacker c…

  36. 7.1CVE-2026-102457EPSS 0.4%

    EasyFlow .NET developed by Digiwin has an Arbitrary File Read vulnerability. Authenticated remote attackers can exploit this vulnerability to download arbitrary system files.

  37. 5.8CVE-2026-97316EPSS 0.2%

    The Broken Link Notifier WordPress plugin before 2.0.0.1 does not re-validate the destination of redirects when checking links, allowing unauthenticated attackers to bypass its internal-address filter and make the server send requests to i…

  38. 5.3CVE-2026-96886EPSS 0.2%

    The Course Booking System WordPress plugin before 7.0.9 does not restrict access to its booking export, allowing unauthenticated users to download the name, email address and billing address of every customer who has booked a course.

  39. 2.7CVE-2026-94297EPSS 0.2%

    The Media Library Organizer WordPress plugin before 2.1.4 does not verify that the requesting user holds the target taxonomy's management capability before creating a new term, allowing users with contributor-level access and above to cre…

  40. 5.3CVE-2026-94274EPSS 0.2%

    The YayReviews WordPress plugin before 1.4.1 does not restrict access to an API route that returns individual customer review records, including reviews still pending moderation, allowing unauthenticated attackers to harvest reviewers' em…

  41. 5.3CVE-2026-93580EPSS 0.2%

    The InPost PL WordPress plugin before 1.9.8 does not verify the authenticity of incoming shipment webhook requests, relying only on a non-secret identifier and an IP check that is not enforced, allowing unauthenticated attackers who know a…

  42. 4.3CVE-2026-90953EPSS 0.2%

    The Image Optimizer WordPress plugin before 1.7.7 does not enforce its intended capability check on several of its read REST routes, allowing any authenticated user to read attachment metadata and site-wide statistics that should be restr…

  43. 4.3CVE-2026-89190EPSS 0.2%

    The Robin Image Optimizer WordPress plugin before 2.0.8 does not check the user's capabilities before dispatching one of its bundled admin framework's request handlers, allowing users with a subscriber-level account to render admin-only R…

  44. 7.1CVE-2026-88797EPSS 0.2%

    The Vayu X WordPress theme before 1.0.6 does not perform any capability check on one of its AJAX actions and exposes the nonce guarding it to every logged-in user, allowing any authenticated user, such as a subscriber, to install and activ…

  45. 3.4CVE-2026-88791EPSS 0.2%

    The Safe Redirect Manager WordPress plugin before 2.3.0 does not properly validate the redirect destination when a wildcard redirect rule to an absolute URL is configured, allowing unauthenticated attackers to redirect visitors to an arbit…

  46. 5.3CVE-2026-86789EPSS 0.2%

    The Connections Business Directory WordPress plugin through 10.4.67 does not apply its visibility and moderation-status restrictions on certain REST API read endpoints, allowing unauthenticated attackers to retrieve directory entries that …

  47. 4.3CVE-2026-85576EPSS 0.2%

    The All in One Files Upload WordPress plugin before 2.0.17 does not have any capability check, and does not verify the authenticity of the request, when saving its settings, allowing any authenticated user, such as a subscriber, to change …

  48. 5.3CVE-2026-83560EPSS 0.2%

    The New User Approve WordPress plugin before 3.2.10 does not properly verify authentication on a set of integration REST API routes when the integration is unconfigured, allowing unauthenticated attackers to retrieve personal data (id, use…

  49. 5.3CVE-2026-80333EPSS 0.2%

    The Solace Extra WordPress plugin before 1.7.2 does not perform any authorization or post-status checks on its front-end preview routes, allowing unauthenticated visitors to read the rendered content of non-published posts and pages of any…

  50. 5.3CVE-2026-75824EPSS 0.2%

    The User Frontend WordPress plugin before 4.3.12 does not check whether the site allows user registration before creating an account, allowing unauthenticated users to create accounts on sites where registration is disabled. The created …