OWASP A01:2025 Broken Access Control vulnerabilities, newest first, page 167
Filter
The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A01:2025 at MITRE.
Its weaknesses: 40
CWE-22, CWE-23, CWE-36, CWE-59, CWE-61, CWE-65, CWE-200, CWE-201, CWE-219, CWE-276, CWE-281, CWE-282, CWE-283, CWE-284, CWE-285, CWE-352, CWE-359, CWE-377, CWE-379, CWE-402, CWE-424, CWE-425, CWE-441, CWE-497, CWE-538, CWE-540, CWE-548, CWE-552, CWE-566, CWE-601, CWE-615, CWE-639, CWE-668, CWE-732, CWE-749, CWE-862, CWE-863, CWE-918, CWE-922, CWE-1275
- 6.1CVE-2026-78377EPSS 0.2%
URL redirection to untrusted site ('open redirect') vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Phishing. T…
- 5.3CVE-2026-19733EPSS 0.3%
Server-Side request forgery (SSRF) vulnerability in Yordam Informatics Technology Consulting, Training, and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows Server Side Request Forgery. …
- 8.8CVE-2026-87766EPSS 0.2%
A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This ha…
- 3.3CVE-2026-80175EPSS 0.1%
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability. A low privileged atta…
- 7.5CVE-2026-80123EPSS 0.3%
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with remote access could potentially ex…
- 4.9CVE-2026-19729EPSS 0.6%
A flaw was found in the key provider component of the keycloak-services library, which is the core engine for the Red Hat Build of Keycloak. The issue occurs because a previous fix for path probing was incomplete, allowing a realm administ…
- 6.9CVE-2026-87747EPSS 0.6%
The Enterprise Cloud Database developed by Ragic has an Arbitrary File Read vulnerability. Privileged remote attackers can exploit Relative Path Traversal to download arbitrary system files.
- 4.3CVE-2026-19802EPSS 0.6%
The Checkout Custom Fields Builder for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.5. This is due to the plugin not properly verifying that a user is authorized to perfor…
- 4.3CVE-2026-8615EPSS 0.3%
The Reviso Exporter for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check and missing nonce verification on the disconnect_callback() function in versions up to, and inclu…
- 5.4CVE-2026-85133EPSS 0.2%
The WPLP Cookie Consent WordPress plugin before 4.4.2 does not perform nonce or capability checks on several of its settings AJAX actions, allowing any authenticated user, such as a subscriber, to read and destroy scan data belonging to t…
- 4.3CVE-2026-85132EPSS 0.3%
The WPLP Cookie Consent WordPress plugin before 4.4.2 does not perform nonce or capability checks on one of its cookie scanner AJAX actions, allowing any authenticated user, such as a subscriber, to read back the automated scan schedule t…
- 5.3CVE-2026-85037EPSS 0.3%
The Sunshine Photo Cart WordPress plugin before 3.7 does not validate that a client-supplied price identifier belongs to the item being purchased when it is added to the cart, allowing unauthenticated users to buy items at a lower price d…
- 5.3CVE-2026-84908EPSS 0.4%
The WPFunnels plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 3.12.13. This is due to the plugin registering the 'wpfnl_load_payment' AJAX action for both authenticated and unauthenticated (wp_…
- 5.3CVE-2026-84222EPSS 0.3%
The Kirki WordPress plugin before 6.3.0 does not check whether the requester is allowed to read a post before rendering and returning its page content, allowing unauthenticated users to retrieve the content of pages that are not publicly …
- 5.3CVE-2026-82848EPSS 0.3%
The Masteriyo LMS WordPress plugin before 3.4.0 does not perform any authorization check before returning a course enrolment record over its REST API, allowing unauthenticated users to read any learner's enrolment status, timestamps and c…
- 4.3CVE-2026-82185EPSS 0.3%
The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have capability or nonce checks on some of its A/B testing actions, allowing any authenticated user, such as a subscriber, to overwrite the cookie banner configuration shown t…
- 5.3CVE-2026-82184EPSS 0.2%
The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have any authorisation or CSRF checks when storing visitor consent state, and the code that does so runs on every front-end page load, allowing unauthenticated attackers to ov…
- 4.7CVE-2026-81741EPSS 0.3%
The Groundhogg — CRM, Newsletters, and Marketing Automation WordPress plugin before 4.7.2 does not restrict the redirect target of its email preference confirmation flow to the site's own host, allowing unauthenticated attackers to redirec…
- 5.3CVE-2026-81022EPSS 0.3%
The SupportCandy WordPress plugin before 3.5.3 does not validate a submitted per-ticket authorization code before disclosing the real code to the requester, allowing unauthenticated users to read the contents of any support ticket.
- 5.3CVE-2026-81021EPSS 0.3%
The SupportCandy WordPress plugin before 3.5.3 does not perform an authorization check on one of its support-ticket attachment download paths, allowing unauthenticated attackers to read protected customer-uploaded attachments by enumerati…
- 5.9CVE-2026-80341EPSS 0.2%
The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.26 does not verify that a stored payment method belongs to the user attaching it, allowing any authenticated user, such as a subscriber, to bind another customer's stor…
- 5.3CVE-2026-80340EPSS 0.3%
The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.26 does not validate the order key before adding order data to the JavaScript configuration it outputs on the front end, allowing unauthenticated users to obtain the se…
- 5.3CVE-2026-80339EPSS 0.3%
The Payment Plugins for Stripe WooCommerce WordPress plugin before 4.0.12 does not validate the order key before adding order data to the JavaScript configuration it outputs on the front end, allowing unauthenticated users to obtain the bi…
- 4.3CVE-2026-75905EPSS 0.4%
The WP Recipe Maker plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 10.8.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it pos…
- 6.5CVE-2026-75861EPSS 0.3%
The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not verify that the user redeeming a gift card is its intended recipient, allowing any authenticated user, such as a subscriber, to redeem gift cards belonging to …
- 4.3CVE-2026-19946EPSS 0.3%
The Awesome Support plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 6.3.9. This is due to a missing capability check on the wpas_do_mr_deny_user() function, which unlike its counterpart wpas_do…
- 5.3CVE-2026-18042EPSS 0.3%
The WP Travel WordPress plugin before 12.0.2 does not verify that the requester is authorized to act on the booking targeted by one of its front-end payment-message handlers, allowing unauthenticated attackers to cancel the payment on any…
- 7.5CVE-2026-16960EPSS 0.5%
The Loops & Logic WordPress plugin before 4.3.0 does not restrict its public template-data action to the data a visitor is permitted to see, allowing unauthenticated users to read arbitrary user records (including email addresses and roles…
- 3.7CVE-2026-13146EPSS 0.2%
The WP Travel WordPress plugin before 12.0.2 does not properly verify that the requester owns the booking targeted by its bank-deposit slip submission, allowing an unauthenticated attacker who knows the target customer's email address to …
- 3.7CVE-2026-13144EPSS 0.2%
The WP Travel WordPress plugin before 12.0.2 does not properly verify that the requester is authorized to modify the targeted booking on one branch of its bank-deposit handler, allowing an unauthenticated attacker who knows the target cus…
- 2.1CVE-2026-21109EPSS 0.2%
Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information.
- 5.9CVE-2026-21105EPSS 0.1%
Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access sensitive information.
- 6.9CVE-2026-21100EPSS 0.1%
Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity.
- 6.9CVE-2026-21098EPSS 0.09%
Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction.
- 4.6CVE-2026-21097EPSS 0.2%
Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity.
- 5.4CVE-2026-11821EPSS 0.3%
The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.1.17. This is due to the plugin not properly verifying that…
- 5.7CVE-2026-57825EPSS 0.5%
In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files.
- 7.7CVE-2026-87084EPSS 0.3%
Tanium addressed a server-side request forgery vulnerability in Enforce.
- 8.1CVE-2026-87075EPSS 0.4%
Tanium addressed an improper access controls vulnerability in Comply.
- 6.5CVE-2026-87073EPSS 0.3%
Tanium addressed an improper access controls vulnerability in Comply.
- 7.1CVE-2026-87072EPSS 0.3%
Tanium addressed an improper access controls vulnerability in Comply.
- 5.4CVE-2026-87048EPSS 0.3%
Tanium addressed an improper access controls vulnerability in Comply.
- 6.3CVE-2026-87047EPSS 0.3%
Tanium addressed an improper access controls vulnerability in Comply.
- 4.3CVE-2026-87046EPSS 0.3%
Tanium addressed an improper access controls vulnerability in Comply.
- 5.4CVE-2026-87037EPSS 0.2%
Tanium addressed an improper access controls vulnerability in Comply.
- 8.1CVE-2026-87036EPSS 0.4%
Tanium addressed an improper access controls vulnerability in Comply.
- 4.3CVE-2026-87035EPSS 0.3%
Tanium addressed an information disclosure vulnerability in Comply.
- 5.4CVE-2026-87033EPSS 0.3%
Tanium addressed an improper access controls vulnerability in Comply.
- 4.3CVE-2026-87032EPSS 0.3%
Tanium addressed an information disclosure vulnerability in Tanium Server.
- 8.5CVE-2026-87030EPSS 0.4%
Tanium addressed a path traversal vulnerability in Comply.