Fallos del tipo CWE-862

6841 resultados
CVE-2024-43297MEDIUMWordPress Clone plugin <= 2.4.5 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-30235MEDIUMWordPress Multiple Page Generator Plugin – MPG plugin <= 3.4.0 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-49845MEDIUMWordPress Redirects plugin <= 1.2.1 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-24604MEDIUMWordPress VForm plugin <= 3.0.5 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-32143MEDIUMWordPress Podlove Podcast Publisher plugin <= 4.1.0 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-24832HIGHWordPress EventPrime plugin <= 3.3.9 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-33570MEDIUMWordPress MetForm plugin <= 3.8.3 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-48998HIGHDataease MYSQL JDBC File Reading VulnerabilityEPSS 0.4%CVE-2025-24571MEDIUMWordPress WP Fast Total Search plugin <= 1.78.258 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-23764MEDIUMWordPress Copy Move Posts plugin <= 1.6 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-45275MEDIUMWordPress Contact Form builder with drag & drop plugin <= 2.3.28 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-23778MEDIUMWordPress User Sync ActiveCampaign plugin <= 1.3.2 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-1261HIGHMissing MAC layer security in Wi-SUN SDKEPSS 0.4%CVE-2024-45493CRITICALAn issue was discovered in MSA FieldServer Gateway 5.0.0 through 6.5.2 (Fixed in 7.0.0). The FieldServer Gateway has internal users, whose aEPSS 0.4%CVE-2024-27190MEDIUMWordPress Download Media plugin <= 1.4.2 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2022-42884MEDIUMWordPress WIP Custom Login Plugin <= 1.2.7 is vulnerable to Broken Access ControlEPSS 0.4%CVE-2023-1262HIGHMissing MAC layer security in Wi-SUN Linux Border RouterEPSS 0.4%CVE-2026-6510CRITICALInfusedWoo Pro <= 5.1.2 - Unauthenticated Missing Authorization to Privilege Escalation via 'iwar_save_recipe'EPSS 0.4%CVE-2024-32675MEDIUMWordPress Order Limit for WooCommerce plugin <= 2.0.0 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2026-6214MEDIUMForminator Forms <= 1.53.0 - Missing Authorization to Authenticated (Subscriber+) Scheduled Form Submission Export via forminator_export_entries Action on wp_loaded HookEPSS 0.4%