Falhas do tipo CWE-862

7.062 resultados
CVE-2025-62915MEDIUMWordPress SMS Contact Form 7 Notifications by ClickSend plugin <= 1.4.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-8692MEDIUMVedrixa Forms <= 1.1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Form Structure Modification via wefb_save_form_structure AJAX ActionEPSS 0.2%CVE-2025-13790MEDIUMScada-LTS cross-site request forgeryEPSS 0.2%CVE-2026-45212MEDIUMWordPress Asset CleanUp: Page Speed Booster plugin <= 1.4.0.3 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-24633MEDIUMWordPress Add Expires Headers & Optimized Minify plugin <= 3.2.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2023-5165HIGHDocker Desktop before 4.23.0 allows Enhanced Container Isolation bypass via debug shellEPSS 0.2%CVE-2026-32586MEDIUMWordPress Booster for WooCommerce plugin < 7.11.3 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-62122MEDIUMWordPress Trash Duplicate and 301 Redirect plugin <= 1.9.1 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-62013MEDIUMWordPress UiChemy plugin <= 4.0.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-26656MEDIUMMissing Authorization check in S/4HANA (Manage Purchasing Info Records)EPSS 0.2%CVE-2025-48282MEDIUMWordPress Majestic Support plugin <= 1.1.0 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2026-32432MEDIUMWordPress WP Time Slots Booking Form plugin <= 1.2.42 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-32380MEDIUMWordPress Numinous theme <= 1.3.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-26867MEDIUMWordPress Bulk theme <= 1.0.11 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-32381MEDIUMWordPress App Landing Page theme <= 1.2.2 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-32348MEDIUMWordPress MAS Videos plugin <= 1.3.2 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-32378MEDIUMWordPress Book Landing Page theme <= 1.2.7 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-54730MEDIUMWordPress Embedder for Google Reviews Plugin <= 1.7.3 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2026-32339MEDIUMWordPress Bakes And Cakes theme <= 1.2.9 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-48151HIGHBudibase: Webhook schema endpoint authorization bypass allows unauthenticated mutation of webhook and automation schemaEPSS 0.2%