Fallos del tipo CWE-862
7017 resultadosCVE-2026-25333MEDIUMWordPress Shopwell theme <= 1.0.11 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-39668MEDIUMWordPress Book Previewer for Woocommerce plugin <= 1.0.6 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-0506HIGHMissing Authorization check in SAP NetWeaver Application Server ABAP and ABAP PlatformEPSS 0.2%CVE-2026-39690MEDIUMWordPress Author Avatars List/Block plugin <= 2.1.25 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-11373MEDIUMPopup and Slider Builder by Depicter – Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Safe File Type UploadEPSS 0.2%CVE-2026-3117MEDIUMInstance and webhook GitLab plugin commands were able to be run by non-admin usersEPSS 0.2%CVE-2026-23548MEDIUMWordPress DirectoryPress plugin <= 3.6.25 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-24967MEDIUMWordPress Amelia plugin <= 1.2.38 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-66127MEDIUMWordPress Essential Real Estate plugin <= 5.3.2 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-39528MEDIUMWordPress WP Delicious plugin <= 1.9.5 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-47197HIGHQuest Bot: Discord moderation role hierarchy bypass in ban, kick, mute, unmute, warn, and nickname commandsEPSS 0.2%CVE-2026-3445HIGHPaid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress <= 4.16.11 - Missing Authorization to Authenticated (Subscriber+) Membership Payment BypassEPSS 0.2%CVE-2026-57323MEDIUMWordPress Flash & HTML5 Video plugin <= 2.11.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-68596MEDIUMWordPress Bit Assist plugin <= 1.5.11 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-40667HIGHMissing authorization vulnerability in TCMAN GIM v11EPSS 0.2%CVE-2026-8617MEDIUMSearchPlus <= 1.7.1 - Missing Authorization to Unauthenticated Settings Modification and Deletion via searchplus_save_token & searchplus_reset_token AJAX ActionsEPSS 0.2%CVE-2025-53113LOWGLPI technicians can access unauthorized information through external linksEPSS 0.2%CVE-2025-12527MEDIUMPage & Post Notes <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Note Update/DeletionEPSS 0.2%CVE-2026-25384MEDIUMWordPress WP-Lister Lite for eBay plugin <= 3.8.5 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-25370MEDIUMWordPress WP Compress plugin <= 6.60.28 - Broken Access Control vulnerabilityEPSS 0.2%