Vulnerabilities (CVE)

Filtered by CWE-862
Total 9943 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-25911 2026-06-17 N/A 8.6 HIGH
Missing Authorization vulnerability in Skymoon Labs MoveTo.This issue affects MoveTo: from n/a through 6.2.
CVE-2024-25908 2026-06-17 N/A 4.3 MEDIUM
Missing Authorization vulnerability in JoomUnited WP Media folder.This issue affects WP Media folder: from n/a through 5.7.2.
CVE-2024-25907 2026-06-17 N/A 5.4 MEDIUM
Missing Authorization vulnerability in JoomUnited WP Media folder.This issue affects WP Media folder: from n/a through 5.7.2.
CVE-2024-25643 1 Sap 1 Fiori 2026-06-17 N/A 4.3 MEDIUM
The SAP Fiori app (My Overtime Request) - version 605, does not perform the necessary authorization checks for an authenticated user which may result in an escalation of privileges. It is possible to manipulate the URLs of data requests to access information that the user should not have access to. There is no impact on integrity and availability.
CVE-2024-25092 1 Xlplugins 1 Nextmove 2026-06-17 N/A 8.8 HIGH
Missing Authorization vulnerability in XLPlugins NextMove Lite.This issue affects NextMove Lite: from n/a through 2.17.0.
CVE-2024-24883 1 Bdthemes 1 Prime Slider 2026-06-17 N/A 4.3 MEDIUM
Missing Authorization vulnerability in BdThemes Prime Slider – Addons For Elementor.This issue affects Prime Slider – Addons For Elementor: from n/a through 3.11.10.
CVE-2024-24850 2026-06-17 N/A 5.3 MEDIUM
Missing Authorization vulnerability in Mark Stockton Quicksand Post Filter jQuery Plugin.This issue affects Quicksand Post Filter jQuery Plugin: from n/a through 3.1.1.
CVE-2024-24844 2026-06-17 N/A 7.5 HIGH
Missing Authorization vulnerability in IdeaBox Creations PowerPack Pro for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PowerPack Pro for Elementor: from n/a through 2.10.6.
CVE-2024-24840 1 Bdthemes 1 Element Pack 2026-06-17 N/A 4.3 MEDIUM
Missing Authorization vulnerability in BdThemes Element Pack Elementor Addons.This issue affects Element Pack Elementor Addons: from n/a through 5.4.11.
CVE-2024-24835 1 Pluginus 1 Bear - Woocommerce Bulk Editor And Products Manager Professional 2026-06-17 N/A 4.3 MEDIUM
Missing Authorization vulnerability in realmag777 BEAR.This issue affects BEAR: from n/a through 1.1.4.
CVE-2024-24833 1 Leevio 1 Happy Addons For Elementor 2026-06-17 N/A 4.3 MEDIUM
Missing Authorization vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addons.This issue affects Happy Addons for Elementor: from n/a through <= 3.10.1.
CVE-2024-24832 1 Metagauss 1 Eventprime 2026-06-17 N/A 8.2 HIGH
Missing Authorization vulnerability in Metagauss EventPrime.This issue affects EventPrime: from n/a through 3.3.9.
CVE-2024-24822 1 Pimcore 1 Admin Classic Bundle 2026-06-17 N/A 6.5 MEDIUM
Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore. Prior to version 1.3.3, an attacker can create, delete etc. tags without having the permission to do so. A fix is available in version 1.3.3. As a workaround, one may apply the patch manually.
CVE-2024-24805 2026-06-17 N/A 5.3 MEDIUM
Missing Authorization vulnerability in Deepak anand WP Dummy Content Generator.This issue affects WP Dummy Content Generator: from n/a through 3.1.2.
CVE-2024-24799 1 Woocommerce 1 Box Office 2026-06-17 N/A 6.5 MEDIUM
Missing Authorization vulnerability in WooCommerce WooCommerce Box Office.This issue affects WooCommerce Box Office: from n/a through 1.2.2.
CVE-2024-24741 1 Sap 1 Master Data Governance For Material Data 2026-06-17 N/A 4.3 MEDIUM
SAP Master Data Governance for Material Data - versions 618, 619, 620, 621, 622, 800, 801, 802, 803, 804, does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. This could allow an attacker to read some sensitive information but no impact to integrity and availability.
CVE-2024-24739 1 Sap 1 Bank Account Management 2026-06-17 N/A 6.3 MEDIUM
SAP Bank Account Management (BAM) allows an authenticated user with restricted access to use functions which can result in escalation of privileges with low impact on confidentiality, integrity and availability of the application.
CVE-2024-24719 2026-06-17 N/A 4.3 MEDIUM
Missing Authorization vulnerability in Uriahs Victor Location Picker at Checkout for WooCommerce.This issue affects Location Picker at Checkout for WooCommerce: from n/a through 1.8.9.
CVE-2024-24718 1 Wp-property-hive 1 Propertyhive 2026-06-17 N/A 4.3 MEDIUM
Missing Authorization vulnerability in PropertyHive.This issue affects PropertyHive: from n/a through 2.0.6.
CVE-2024-24716 1 Getawesomesupport 1 Awesome Support 2026-06-17 N/A 5.4 MEDIUM
Missing Authorization vulnerability in Awesome Support Team Awesome Support.This issue affects Awesome Support: from n/a through 6.1.6.