Falhas do tipo CWE-862

6.851 resultados
CVE-2023-47224HIGHWordPress WP Travel plugin <= 7.8.0 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2022-45349MEDIUMWordPress Betheme premium theme <= 26.6.1 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-37872MEDIUMWordPress WooCommerce Ship to Multiple Addresses plugin <= 3.8.5 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2022-45352MEDIUMWordPress Betheme premium theme <= 26.6.1 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-49858MEDIUMWordPress Custom Login plugin <= 4.1.0 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-41857MEDIUMWordPress Click To Tweet plugin <= 2.0.14 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-46188MEDIUMWordPress Freesoul Deactivate Plugins plugin <= 2.1.3 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-33908MEDIUMWordPress WidgetKit plugin <= 2.5.0 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-47321MEDIUMWordPress WP Datepicker plugin <= 2.1.1 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2026-8096MEDIUMKirki <= 6.0.6 - Missing Authorization to Authenticated (Subscriber+) Sensitive Form Submission Data Exposure via 'kirki_wp_admin_get_apis' ActionEPSS 0.4%CVE-2025-32201MEDIUMWordPress Xpro Theme Builder Plugin <= 1.2.8.4 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-49861MEDIUMWordPress Social Media Feather plugin <= 2.1.3 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-49758MEDIUMWordPress WP Booking System plugin <= 2.0.19.2 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-49697MEDIUMWordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-49680MEDIUMWordPress WP VR plugin <= 8.5.5 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-49849MEDIUMWordPress Shortcoder plugin <= 6.3 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-47358MEDIUMWordPress Popup Maker plugin <= 1.19.2 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-5387MEDIUMFunnelforms Free <= 3.4 - Missing Authorization to Enable/Disable Dark ModeEPSS 0.4%CVE-2023-30783MEDIUMWordPress Smart WooCommerce Search plugin <= 2.5.0 - Broken Access ControlEPSS 0.4%CVE-2021-47932CRITICALWordPress TheCartPress 1.5.3.6 Privilege Escalation UnauthenticatedEPSS 0.4%