Fallos del tipo CWE-862

6929 resultados
CVE-2025-67575MEDIUMWordPress Sitewide Notice WP plugin <= 2.4.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-8632MEDIUMKB Support – WordPress Help Desk and Knowledge Base <= 1.6.6 - Missing Authorization to Unauthenticated Ticket Reply ExposureEPSS 0.3%CVE-2025-14358HIGHWordPress REHub Framework plugin <= 19.9.5 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-25309HIGHWordPress PublishPress Authors plugin <= 4.10.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-64268HIGHWordPress Timetics plugin <= 1.0.44 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-22351HIGHWordPress WP FullCalendar plugin <= 1.6 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-64631MEDIUMWordPress WCFM Marketplace plugin <= 3.7.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-40870HIGHDecidim's comments API allows access to all commentable resourcesEPSS 0.3%CVE-2025-0939MEDIUMMagicForm - WordPress Form Builder <= 1.6.2 - Missing AuthorizationEPSS 0.3%CVE-2025-41443MEDIUMGuest user can discover active public channelsEPSS 0.3%CVE-2025-64209HIGHWordPress Masterstudy theme < 4.8.122 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2023-6798MEDIUMRSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.2 - Missing AuthorizationEPSS 0.3%CVE-2025-63294MEDIUMWorkDo HRM SaaS HR and Payroll Tool 8.1 is affected vulnerable to Insecure Permissions. An authenticated user can create leave or resignatioEPSS 0.3%CVE-2026-6667MEDIUMPgBouncer missing authorization check in KILL_CLIENT admin commandEPSS 0.3%CVE-2026-44550MEDIUMOpen WebUI: Mass Assignment via Pydantic extra='allow' Allows Creating Folders in Other Users' AccountsEPSS 0.3%CVE-2026-39513HIGHWordPress Easy Appointments plugin <= 3.12.21 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-60077HIGHWordPress YayPricing plugin <= 3.5.3 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-69313HIGHWordPress PostX plugin <= 5.0.3 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-27374HIGHWordPress WooCommerce Order Details plugin <= 3.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-32498HIGHWordPress RegistrationMagic plugin <= 6.0.7.6 - Broken Access Control vulnerabilityEPSS 0.3%