Fallos del tipo CWE-862
7075 resultadosCVE-2025-43331MEDIUMA downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to acceEPSS 0.2%CVE-2025-63001MEDIUMWordPress Hotel Booking plugin <= 3.8 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-57660MEDIUMWordPress Booking and Rental Manager plugin <= 2.7.1 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-39697MEDIUMWordPress MAIO – The new AI GEO / SEO tool plugin <= 6.2.8 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-27042MEDIUMWordPress NotificationX plugin <= 3.2.1 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2023-25969MEDIUMWordPress Contact Form & Lead Form Elementor Builder plugin <= 1.8.4 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-69028MEDIUMWordPress weForms plugin <= 1.6.25 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-63016MEDIUMWordPress QuadLayers TikTok Feed plugin <= 4.6.5 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-63031MEDIUMWordPress EasyTest plugin <= 1.0.1 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-62755MEDIUMWordPress GS Portfolio for Envato plugin <= 1.4.2 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-62147MEDIUMWordPress Realbig plugin <= 1.1.3 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-32440MEDIUMWordPress WP Food plugin < 2.7.1 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-62092MEDIUMWordPress Wiremo plugin <= 1.4.99 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-63022MEDIUMWordPress Simple Like Page plugin <= 1.5.3 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-62087MEDIUMWordPress Sticky Notes for WP Dashboard plugin <= 1.2.4 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-52714HIGHWordPress SEO Plugin by Squirrly SEO plugin <= 12.4.16 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-24612MEDIUMWordPress Orchid Store theme <= 1.5.15 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-40098MEDIUMOpenMage LTS imports cross-user wishlist item via shared wishlist code, leading to private option disclosure and file-disclosure variantEPSS 0.2%CVE-2026-23721MEDIUMOpenProject users with "View Members" permission in any project can view all Group membershipsEPSS 0.2%CVE-2025-62145MEDIUMWordPress DMCA Protection Badge plugin <= 2.2.0 - Broken Access Control vulnerabilityEPSS 0.2%