cve.bz

OWASP A01:2025 Broken Access Control vulnerabilities, newest first, page 12

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A01:2025 at MITRE.

Its weaknesses: 40

CWE-22, CWE-23, CWE-36, CWE-59, CWE-61, CWE-65, CWE-200, CWE-201, CWE-219, CWE-276, CWE-281, CWE-282, CWE-283, CWE-284, CWE-285, CWE-352, CWE-359, CWE-377, CWE-379, CWE-402, CWE-424, CWE-425, CWE-441, CWE-497, CWE-538, CWE-540, CWE-548, CWE-552, CWE-566, CWE-601, CWE-615, CWE-639, CWE-668, CWE-732, CWE-749, CWE-862, CWE-863, CWE-918, CWE-922, CWE-1275

  1. 7.5CVE-2026-62264EPSS 0.5%

    PDF Reader MCP is a Model Context Protocol server for reading PDF documents. In versions 2.2.0 and later prior to 3.0.1, when `MCP_TRANSPORT=http` enables the opt-in HTTP server, `@sylphx/pdf-reader-mcp` reads `MCP_API_KEY` and logs that `…

  2. 8.2CVE-2026-62162EPSS 0.4%

    Hydra is a layer-two scalability solution for Cardano. Prior to 2.1.0, the `Claim` branch in `hydra-plutus/validators/deposit.ak` checks only that `datum.head_id` matches the attacker-controlled `redeemer.currencySymbol` and that the trans…

  3. 5.3CVE-2026-62122EPSS 0.3%

    Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.31.

  4. 5.3CVE-2026-62056EPSS 0.3%

    Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent CRM: from n/a through 3.2.6.

  5. 4.3CVE-2026-62047EPSS 0.3%

    Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.2.

  6. 4.3CVE-2026-62023EPSS 0.2%

    Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issu…

  7. 4.3CVE-2026-62019EPSS 0.3%

    Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BookIt: from n/a through 2.6.0.6.

  8. 2.3CVE-2026-61840EPSS 0.3%

    Quest Bot is an opensource Discord Bot. Prior to 1.1.9, the `image to GIF` command uses a request helper that validates a hostname's public IP addresses but then sends the actual request by hostname, causing a `second DNS lookup`. An attac…

  9. 6.5CVE-2026-54850EPSS 0.4%

    Subscriber Broken Access Control in Booking and Rental Manager <= 2.8.2 versions.

  10. 6.9CVE-2026-120007EPSS 0.3%

    NodeBB 1.18.0 through 4.16.5 contains an authorization bypass vulnerability that allows unauthenticated visitors to act on other accounts by supplying a uid during POST /register. Attackers can submit an empty email at the /register/comple…

  11. 7.5CVE-2026-116862EPSS 0.3%

    Unauthenticated Broken Access Control in WP REST Cache <= 2026.3.1 versions.

  12. 7.5CVE-2026-116861EPSS 0.3%

    Unauthenticated Sensitive Data Exposure in Flexible Chat <= 1.1.0 versions.

  13. 6.5CVE-2026-116853EPSS 0.2%

    Unauthenticated Broken Access Control in GiveWP <= 4.19.0.1 versions.

  14. 6.5CVE-2026-116410EPSS 0.2%

    Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS <= 3.4.3 versions.

  15. 7.5CVE-2026-116401EPSS 0.3%

    Unauthenticated Broken Access Control in HUSKY <= 1.4.6 versions.

  16. 6.5CVE-2026-115947EPSS 0.2%

    Unauthenticated Sensitive Data Exposure in HUSKY <= 1.4.6 versions.

  17. 5.0CVE-2026-115604EPSS 0.4%

    Subscriber Arbitrary File Deletion in SureDash <= 1.12.3 versions.

  18. 5.3CVE-2026-107868EPSS 0.3%

    Unauthenticated Bypass Vulnerability in YITH WooCommerce Product Add-Ons <= 4.34.0 versions.

  19. 4.3CVE-2026-104674EPSS 0.2%

    Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.31.

  20. 7.5CVE-2026-97638EPSS 0.6%

    The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.57.3.1 via the 'previous_draft_id' parameter due to miss…

  21. 7.0CVE-2026-84243EPSS 0.3%

    The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to "..", unless the program is setuid or setgid (AT_SECURE). An attacker who can se…

  22. 4.4CVE-2026-69446EPSS 0.2%

    Incorrect authorization in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.

  23. 6.5CVE-2026-13747EPSS 0.4%

    The Meow Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.5.4 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible…

  24. 8.7CVE-2026-119979EPSS 0.4%

    LM Studio before 0.4.22+1 contains a path traversal vulnerability in the model downloader's resolveDownloadRequest that allows attackers to write files outside the models directory using backslash-separated traversal filenames. Attackers c…

  25. 9.0CVE-2026-119978EPSS 0.3%

    Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated users to execute OS commands by abusing allowlisted langchain and mammoth modules when ALLOW_BUILTIN_DEP=true. Attackers can submit JavaScript to /api/…

  26. 6.9CVE-2026-119763EPSS 0.5%

    changelog.com before commit 7b35e829 contains a missing authorization vulnerability that allows unauthenticated attackers to read unpublished content via preview routes in PostController, NewsIssueController and NewsItemController. Attacke…

  27. 5.5CVE-2026-119620EPSS 0.5%

    A vulnerability was determined in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a049297. This vulnerability affects the function move_uploaded_file of the file admin/add_logs.php. Executing a manipulation of the…

  28. 7.5CVE-2026-110305EPSS 0.6%

    The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 0.9.2.7 via the process. This makes it possible for unauthenticated attackers to extract sensit…

  29. 4.3CVE-2026-109592EPSS 0.3%

    The OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.16. This is due to the plugin not properly verifying that a user is…

  30. 7.5CVE-2026-107630EPSS 0.5%

    The Email Templates Customizer and Designer for WordPress and WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.14 This is due to the plugin not properly verifying that a user …

  31. 4.9CVE-2026-104739EPSS 0.8%

    The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the setSupportCustomImage function in all versions up to, and including, 5.0…

  32. 8.7CVE-2025-8574EPSS 0.4%

    The Database Cleaner plugin for WordPress is vulnerable to arbitrary table deletion in all versions up to, and including, 1.4.7. This is due to a lack of restriction on database tables that can be deleted. This makes it possible for authen…

  33. 8.8CVE-2026-65566EPSS 0.2%

    Cross-Site Request Forgery (CSRF) vulnerability in Meow Apps AI Engine ai-engine allows Cross Site Request Forgery.This issue affects AI Engine: from n/a through 3.8.8.

  34. 4.3CVE-2026-62055EPSS 0.3%

    Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.2.

  35. 10.0CVE-2026-61826EPSS 0.3%

    Bazarr is a companion application to Sonarr and Radarr. Prior to 1.5.7-beta.14, the `api_ns_plex` namespace in `bazarr/api/plex/oauth.py` omits `@authenticate` on its Resource handlers, while normal APIs require an API key and no global au…

  36. 5.3CVE-2026-61806EPSS 0.2%

    Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version 2.54.2, unpublished certificate records can be retrieved and viewed by users who should not have access, rather than be…

  37. 5.3CVE-2026-61805EPSS 0.2%

    Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version 2.54.0, quiz submission records are not adequately authorized on the server. Through a `REST` bypass, an authenticated …

  38. 6.1CVE-2026-61789EPSS 0.4%

    DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLite. Prior to 0.22.6, read-only SQL validation can be bypassed on the MySQL and MariaDB connectors. In `src/utils/sql-parser.ts`, `scanSingleLineComment` t…

  39. 6.5CVE-2026-55551EPSS 0.3%

    ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case management. Prior to 5.2.0, by-id read endpoints in `src/main/kotlin/nl/info/zac/app/zaak/ZaakRestService.kt` omit `assertPolicy`(`policyService.readZaa…

  40. 5.0CVE-2026-50000EPSS 0.4%

    SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept documents from, and communicate with anonymous sources. From 2.5.0 until 2.16.0, the `Journalist Interface` can accept an `API…

  41. 5.4CVE-2026-119466EPSS 0.1%

    Cross-Site Request Forgery (CSRF) vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Cross Site Request Forgery.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5.

  42. 5.4CVE-2026-119367EPSS 0.2%

    Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Events Calendar: from n/a through 6.18.2.

  43. 8.3CVE-2026-115642EPSS 0.5%

    In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in possession of an access-restricted application credential may bypass those restrictions resulting in elevation of privilege…

  44. 5.4CVE-2026-62141EPSS 0.2%

    Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent CRM: from n/a through 3.2.6.

  45. 5.3CVE-2026-119712EPSS 0.3%

    PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser._fetch_single_url that allows attackers to make the indexing service fetch internal addresses by embedding image URLs in documents. Attackers can su…

  46. 7.1CVE-2026-119710EPSS 0.4%

    PipesHub 0.3.0 before 0.10.0 contains an event type injection vulnerability that allows authenticated users with only the crawl:write scope to delete connectors by injecting into the :connector path segment. Attackers can send a :connector…

  47. 6.9CVE-2026-119709EPSS 0.4%

    Grimoire before 1.0.0 contains an unauthenticated server-side request forgery vulnerability in the /api/fetch-metadata POST handler that passes user-supplied URLs to getMetadata() without authentication checks. Attackers can submit URLs ta…

  48. 7.1CVE-2026-119708EPSS 0.3%

    abp-next-admin 10.4.0 through 10.7.0 contains a cross-tenant authorization bypass in the BlobManagement download-by-name endpoint, letting authenticated users read other tenants' files. Attackers supply a victim tenantId in the request pat…

  49. 7.1CVE-2026-119707EPSS 0.3%

    SonicJS through 3.0.0 contains a missing authorization vulnerability in the /api/:collection and /api/content write routes that only check coarse role labels. Authenticated authors or editors can use a bearer JWT or API key to create, modi…

  50. 5.3CVE-2026-119704EPSS 0.1%

    Bastille through 1.4.4 contains a symlink following vulnerability in the cp.sh, rcp.sh and jcp.sh subcommands that allows jailed users to escape jail isolation. Attackers inside a jail can plant symlinks pointing to host paths or other jai…