Fallos del tipo CWE-862

6850 resultados
CVE-2025-31787MEDIUMWordPress Cue by AudioTheme.com plugin <= 2.4.4 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2026-45242HIGHSummarize < 0.15.1 Path Traversal via slidesDir ParameterEPSS 0.4%CVE-2024-32691MEDIUMWordPress Active Products Tables for WooCommerce plugin <= 1.0.6.2 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2019-25215HIGHARI-Adminer <= 1.1.14 - Missing Authorization and No Direct File Access RestrictionsEPSS 0.4%CVE-2026-22765HIGHDell Wyse Management Suite, versions prior to WMS 5.5, contain a Missing Authorization vulnerability. A low privileged attacker with remote EPSS 0.4%CVE-2025-23025CRITICALPrivilege escalation (PR) through realtime WYSIWYG editing in XWikiEPSS 0.4%CVE-2023-49754MEDIUMWordPress Bulk Edit Post Titles plugin <= 5.0.0 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-47362MEDIUMWordPress Strong Testimonials plugin <= 3.1.16 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2026-6963HIGHWP Mail Gateway <= 1.8 - Missing Authorization to Authenticated (Subscriber+) SMTP Configuration Modification via 'wmg_save_provider_config' AJAX ActionEPSS 0.4%CVE-2024-34371MEDIUMWordPress Login with phone number plugin <= 1.7.18 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-30874MEDIUMWordPress Specific Content For Mobile plugin <= 0.5.3 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-31580HIGHWordPress Ni WooCommerce Product Enquiry plugin <= 4.1.8 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-39635MEDIUMWordPress Youzify plugin <= 1.2.6 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-32254MEDIUMWordPress WPBookit plugin <= 1.0.7 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-5411MEDIUMFunnelforms Free <= 3.4 - Missing Authorization to Post ModificationEPSS 0.4%CVE-2023-30870MEDIUMWordPress Sharkdropship for AliExpress Dropship and Affiliate plugin <= 2.2.3 - Multiple Broken Access Control vulnerabilitiesEPSS 0.4%CVE-2024-10399MEDIUMDownload Monitor <= 5.0.13 - Missing Authorization to Sensitive Information ExposureEPSS 0.4%CVE-2023-5385MEDIUMFunnelforms Free <= 3.4 - Missing Authorization to Arbitrary Post DuplicationEPSS 0.4%CVE-2023-5314MEDIUMWP EXtra <= 6.2 - Missing Authorization to Arbitrary Email SendingEPSS 0.4%CVE-2023-5417MEDIUMFunnelforms Free <= 3.4 - Missing Authorization to Category UpdateEPSS 0.4%