Falhas do tipo CWE-862

6.955 resultados
CVE-2025-14843MEDIUMWizit Gateway for WooCommerce <= 1.2.9 - Missing Authentication to Unauthenticated Arbitrary Order CancellationEPSS 0.3%CVE-2025-50029MEDIUMWordPress AI Tools <= 4.0.7 - Arbitrary Content Deletion VulnerabilityEPSS 0.3%CVE-2026-57355MEDIUMWordPress Classified Listing plugin <= 5.4.2 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-35741MEDIUMWordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-55995MEDIUMWordPress Torod plugin <= 1.7 - Settings Change vulnerabilityEPSS 0.3%CVE-2025-47529MEDIUMWordPress Experto CTA Widget – Call To Action, Sticky CTA, Floating Button Plugin <= 1.1.1 - Settings Change VulnerabilityEPSS 0.3%CVE-2025-32258MEDIUMWordPress Simple Website Logo plugin <= 1.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-39477CRITICALWordPress InWave Jobs Plugin <= 3.5.8 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-6175MEDIUMBooking Ultra Pro <= 1.1.13 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings UpdatesEPSS 0.3%CVE-2024-5127MEDIUMImproper Access Control in lunary-ai/lunaryEPSS 0.3%CVE-2023-52177MEDIUMWordPress Integrate Google Drive plugin <= 1.3.3 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-30926MEDIUMWordPress King Addons for Elementor plugin <= 24.12.58 - Broken Access Control VulnerabilityEPSS 0.3%CVE-2024-32725MEDIUMWordPress 5 Stars Rating Funnel plugin 1.2.67 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-39456MEDIUMWordPress WP Logger plugin <= 2.2 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-6489MEDIUMGetwid – Gutenberg Blocks <= 2.0.10 - Missing Authorization to Google API key updateEPSS 0.3%CVE-2025-4430HIGHUnauthorized file manipulation in EZD RPEPSS 0.3%CVE-2025-24692HIGHWordPress Bulk Menu Edit plugin <= 1.3 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-42961MEDIUMMissing Authorization check in SAP NetWeaver Application Server for ABAPEPSS 0.3%CVE-2025-47690HIGHWordPress Lead Form Data Collection to CRM plugin <= 3.1 - Arbitrary Option Update to Privilege Escalation vulnerabilityEPSS 0.3%CVE-2024-12617MEDIUMWC Price History for Omnibus <= 2.1.3 - Missing AuthorizationEPSS 0.3%