Fallos del tipo CWE-862
7071 resultadosCVE-2026-32457MEDIUMWordPress Advanced Product Fields (Product Addons) for WooCommerce plugin <= 1.6.18 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-66164MEDIUMWordPress Laser plugin <= 1.1.1 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-66161MEDIUMWordPress Grider for Elementor plugin <= 1.0.8 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-5230HIGHImproper Access Control in Mia Technologies' Pizzy LibraryEPSS 0.2%CVE-2025-46434MEDIUMWordPress The Plus Addons for Elementor Pro plugin < 6.3.7 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-66147MEDIUMWordPress Coder for Elementor plugin <= 1.0.13 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-57654MEDIUMWordPress Affiliates Manager plugin <= 2.9.49 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-58410HIGHChurchCRM: Improper object-level authorization allows low-privileged users to read and modify other families’ recordsEPSS 0.2%CVE-2025-66162MEDIUMWordPress Spoter for Elementor plugin <= 1.04 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-67561MEDIUMWordPress Debug Log Viewer plugin <= 2.0.3 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-64378HIGHWordPress ListingPro theme < 2.9.10 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-66167MEDIUMWordPress Lottier plugin <= 1.1.1 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-42519MEDIUMA missing permission check in Jenkins Script Security Plugin 1399.ve6a_66547f6e1 and earlier allows attackers with Overall/Read permission tEPSS 0.2%CVE-2025-66163MEDIUMWordPress Masker for Elementor plugin <= 1.1.4 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-32453MEDIUMWordPress Avada Core plugin < 5.15.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-64273MEDIUMWordPress Email marketing for WordPress by GetResponse Official plugin <= 1.5.3 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-66165MEDIUMWordPress Lottier for WPBakery plugin <= 1.1.7 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-66166MEDIUMWordPress Lottier for Elementor plugin <= 1.0.9 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-32587MEDIUMWordPress WP EasyPay plugin <= 4.2.11 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-69352MEDIUMWordPress The Events Calendar plugin <= 6.15.12.2 - Broken Access Control vulnerabilityEPSS 0.2%