Falhas do tipo CWE-862

6.850 resultados
CVE-2023-48740MEDIUMWordPress Easy Social Feed plugin <= 6.5.1 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-49325MEDIUMWordPress Photo Gallery Builder plugin <= 3.0 - Broken Access Control to Notice Dismissal vulnerabilityEPSS 0.4%CVE-2025-3124MEDIUMMissing Authorization vulnerability was identified in GitHub Enterprise Server that allowed unauthorized access to private repository namesEPSS 0.4%CVE-2023-47832MEDIUMWordPress SearchIQ plugin <= 4.4 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-57961MEDIUMWordPress CoDesigner plugin <= 4.29 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-47874MEDIUMWordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Broken Access ControlEPSS 0.4%CVE-2024-34819MEDIUMWordPress MC Woocommerce Wishlist plugin <= 1.7.2 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-38707MEDIUMWordPress EmbedPress plugin <= 4.0.4 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-37886MEDIUMWordPress RealHomes theme <= 4.0.2 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-34821MEDIUMWordPress Contact List plugin <= 2.9.87 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2026-0825MEDIUMDatabase for Contact Form 7, WPforms, Elementor forms <= 1.4.5 - Missing Authorization to Unauthenticated Form Data Exfiltration via CSV ExportEPSS 0.4%CVE-2022-2350—Disable User Login <= 1.0.1 - Unauthenticated Settings UpdateEPSS 0.4%CVE-2026-27604CRITICALFOSSBilling: Improper API Role Validation (system) Enables Unauthenticated Access to Privileged Admin FunctionsEPSS 0.4%CVE-2023-5386MEDIUMFunnelforms Free <= 3.4 - Missing Authorization to Arbitrary Post DeletionEPSS 0.4%CVE-2024-1662HIGHInformation Disclosure in Porty's PowerBankEPSS 0.4%CVE-2023-23985LOWWordPress Quiz Maker plugin <= 6.3.9.4 - Content SpoofingEPSS 0.4%CVE-2025-13930MEDIUMCheckout Field Manager (Checkout Manager) for WooCommerce <= 7.8.5 - Missing Authorization to Unauthenticated Arbitrary Attachment DeletionEPSS 0.4%CVE-2024-5685HIGHBroken Function Level Authorization (BFLA) in snipe/snipe-itEPSS 0.4%CVE-2025-41764CRITICALUnchecked role in wwwupdate.cgiEPSS 0.4%CVE-2025-69340HIGHWordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.3 - Broken Access Control vulnerabilityEPSS 0.4%