Fallos del tipo CWE-862
6850 resultadosCVE-2024-24703HIGHWordPress MultiVendorX plugin <= 4.0.25 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-45760MEDIUMWordPress wpDiscuz plugin <= 7.6.3 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-47760MEDIUMWordPress Essential Blocks plugin <= 4.2.0 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2026-25538HIGHDevtron Attributes API Unauthorized Access Leading to API Token Signing Key LeakageEPSS 0.4%CVE-2024-27900MEDIUMMissing Authorization check in SAP ABAP PlatformEPSS 0.4%CVE-2022-47601MEDIUMWordPress WP Table Manager plugin <= 3.5.2 - Broken Access ControlEPSS 0.4%CVE-2025-3058HIGHXelion Webchat <= 9.1.0 - Authenticated (Subscriber+) Arbitrary Options UpdateEPSS 0.4%CVE-2024-43296MEDIUMWordPress HTML5 Video Player plugin <= 2.5.30 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-37453MEDIUMWordPress ProfileGrid – User Profiles, Groups and Communities plugin <= 5.8.7 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-32712HIGHWordPress Podlove Podcast Publisher plugin <= 4.0.14 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-47788MEDIUMWordPress Jetpack plugin < 12.7 - Contributor+ Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-43223MEDIUMWordPress EventPrime plugin <= 4.0.3.2 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-1175MEDIUMWP-Recall – Registration, Profile, Commerce & More <= 16.26.6 - Unauthenticated Payment Deletion via delete_paymentEPSS 0.4%CVE-2024-1340MEDIUMLogin Lockdown – Protect Login Form <= 2.08 - Missing AuthorizationEPSS 0.4%CVE-2024-38695MEDIUMWordPress WP GoToWebinar plugin <= 15.6 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-39438HIGHMissing Authorization check allows certain operations on CLA Assistant dataEPSS 0.4%CVE-2024-4010HIGHEmail Subscribers by Icegram Express <= 5.7.19 - Missing Authorization in handle_ajax_requestEPSS 0.4%CVE-2025-57817HIGHFides Webserver API is Vulnerable to OAuth Client Privilege EscalationEPSS 0.4%CVE-2025-23684MEDIUMWordPress Debug Tool plugin <= 2.2 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-41865MEDIUMWordPress Slider Pro plugin <= 4.8.6 - Broken Access Control vulnerabilityEPSS 0.4%