Falhas do tipo CWE-862

7.045 resultados
CVE-2023-43488HIGHThe vulnerability allows a low privileged (untrusted) application to modify a critical system property that should be denied, in order to eEPSS 0.2%CVE-2026-0687MEDIUMMeta-box GalleryMeta <= 3.0.1 - Missing Authorization to Authenticated (Author+) Gallery ManagementEPSS 0.2%CVE-2025-66099MEDIUMWordPress Chat Help plugin <= 3.1.3 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-14371MEDIUMTaxoPress <= 3.41.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Tag ModificationEPSS 0.2%CVE-2023-25068MEDIUMWordPress Magazine Edge theme <= 1.13 - Authenticated Arbitrary Plugin ActivationEPSS 0.2%CVE-2025-48878MEDIUMCombodo iTop vulnerable to IDOR with ModuleInstallation objectEPSS 0.2%CVE-2025-64244MEDIUMWordPress Restrict Elementor Widgets, Columns and Sections plugin <= 1.12 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-64241MEDIUMWordPress WP Coupons and Deals plugin <= 3.2.4 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-63015MEDIUMWordPress WooCommerce Payment Gateway – Paysera plugin <= 3.10.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-62995MEDIUMWordPress MultiParcels Shipping For WooCommerce plugin <= 1.30.12 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-54005MEDIUMWordPress SKT Page Builder plugin <= 4.9 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-63025MEDIUMWordPress Xagio SEO plugin <= 7.1.0.37 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-62736MEDIUMWordPress Image Cleanup plugin <= 1.9.2 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-63067MEDIUMWordPress Porto Theme - Functionality plugin < 3.7.3 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-62996MEDIUMWordPress Custom Layouts – Post + Product grids made easy plugin <= 1.4.12 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-62186HIGHOpenClaw < 2026.6.8 Authorization Bypass via HTTP Model OverrideEPSS 0.2%CVE-2025-64245MEDIUMWordPress Import external attachments plugin <= 1.5.12 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-64248MEDIUMWordPress Request a Quote plugin <= 2.5.3 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-59001MEDIUMWordPress Salient Core plugin <= 3.0.8 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-64247MEDIUMWordPress Read More & Accordion plugin <= 3.5.5.1 - Broken Access Control vulnerabilityEPSS 0.2%