Vulnerabilities (CVE)

Filtered by CWE-862
Total 11531 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-62118 2026-10-13 N/A 7.3 HIGH
Unauthenticated Broken Access Control in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.
CVE-2026-108475 2026-10-13 N/A 4.3 MEDIUM
Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadcast Live Video: from n/a through 7.3.6.
CVE-2026-107432 2026-10-13 N/A 5.4 MEDIUM
Missing Authorization vulnerability in NOUS Ouvert Utile et Simple Event post event-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event post: from n/a through 6.1.1.
CVE-2026-107418 2026-10-13 N/A 5.4 MEDIUM
Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.28.
CVE-2026-103685 2026-10-13 N/A 4.3 MEDIUM
Missing Authorization vulnerability in VillaTheme ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce woo-alidropship allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce: from n/a through 2.2.4.
CVE-2026-109684 2026-10-13 N/A 5.3 MEDIUM
Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10.
CVE-2026-108492 2026-10-13 N/A 5.3 MEDIUM
Missing Authorization vulnerability in Fullworks Plugins Quick Paypal Payments quick-paypal-payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Paypal Payments: from n/a through 6.0.3.
CVE-2026-108493 2026-10-13 N/A 5.3 MEDIUM
Missing Authorization vulnerability in Karolína Vyskočilová Pay for Payment for WooCommerce woocommerce-pay-for-payment allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pay for Payment for WooCommerce: from n/a through 3.0.1.
CVE-2026-40801 2026-10-13 N/A 8.1 HIGH
Subscriber Broken Access Control in Wordable <= 8.2.10 versions.
CVE-2026-40777 2026-10-13 N/A 8.1 HIGH
Subscriber Broken Access Control in WPSection <= 1.5.1 versions.
CVE-2026-109699 2026-10-13 N/A 5.4 MEDIUM
Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.8.
CVE-2026-40808 2026-10-13 N/A 6.5 MEDIUM
Subscriber Broken Access Control in Jetpack VideoPress <= 3.6 versions.
CVE-2026-62035 2026-10-13 N/A 6.3 MEDIUM
Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted <= 3.1.0 versions.
CVE-2026-107430 2026-10-13 N/A 5.4 MEDIUM
Missing Authorization vulnerability in VideoWhisper.com VideoWhisper Site Manager for ChatGPT, Claude, Codex videowhisper-site-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VideoWhisper Site Manager for ChatGPT, Claude, Codex: from n/a through 1.2.10.
CVE-2026-107423 2026-10-13 N/A 4.3 MEDIUM
Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Manager: from n/a through 2.9.22.
CVE-2026-106597 2026-10-13 N/A 5.3 MEDIUM
Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.8.
CVE-2026-103356 2026-10-13 N/A 5.4 MEDIUM
Missing Authorization vulnerability in VillaTheme TMDS tmds-dropshipping-for-temu-and-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TMDS: from n/a through 1.0.15.
CVE-2026-106609 2026-10-13 N/A 7.5 HIGH
Missing Authorization vulnerability in Web Impian Bayarcash WooCommerce bayarcash-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bayarcash WooCommerce: from n/a through 4.4.2.
CVE-2026-107863 2026-10-13 N/A 5.3 MEDIUM
Missing Authorization vulnerability in Codection Products Restricted Users for WooCommerce woo-products-restricted-users allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Products Restricted Users for WooCommerce: from n/a through 0.7.
CVE-2026-109696 2026-10-13 N/A 5.4 MEDIUM
Missing Authorization vulnerability in WP ManageNinja LLC FluentBoards fluent-boards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentBoards: from n/a through 2.1.0.