A vulnerability was found in Poly Trio 8500, Trio 8800 and Trio C60. It has been classified as problematic. This affects an unknown part of the component Poly Lens Management Cloud Registration. The manipulation leads to missing authorizat…

CVE-2023-44689MEDIUMCVSS 4.3EG 4.3

2023-10-11

e-Gov Client Application (Windows version) versions prior to 2.1.1.0 and e-Gov Client Application (macOS version) versions prior to 1.1.1.0 are vulnerable to improper authorization in handler for custom URL scheme. A crafted URL may direct…

CVE-2023-4469MEDIUMCVSS 5.3EG 5.3

2023-10-06

The Profile Extra Fields by BestWebSoft plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the prflxtrflds_export_file function in versions up to, and including, 1.2.7. This makes it poss…

CVE-2023-44988MEDIUMCVSS 4.3EG 4.3

2025-01-02

Missing Authorization vulnerability in Martin Gibson WP Custom Admin Interface allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Custom Admin Interface: from n/a through 7.32.

CVE-2023-45000HIGHCVSS 8.2EG 8.2

2024-04-16

Missing Authorization vulnerability in LiteSpeed Technologies LiteSpeed Cache.This issue affects LiteSpeed Cache: from n/a through 5.7.

CVE-2023-45002MEDIUMCVSS 4.3EG 4.3

2025-01-02

Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Frontend: from n/a through 3.6.8.

CVE-2023-45045MEDIUMCVSS 5.4EG 5.4

2025-01-02

Missing Authorization vulnerability in krozero WP Custom Widget area wp-custom-widget-area allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Custom Widget area: from n/a through <= 1.2.5.

CVE-2023-45061MEDIUMCVSS 5.3EG 5.3

2025-01-02

Missing Authorization vulnerability in awsm.in WP Job Openings wp-job-openings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Openings: from n/a through <= 3.4.1.

CVE-2023-45101MEDIUMCVSS 4.3EG 4.3

2025-01-02

Missing Authorization vulnerability in CusRev Customer Reviews for WooCommerce customer-reviews-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Customer Reviews for WooCommerce: from n…

CVE-2023-45104HIGHCVSS 7.3EG 7.3

2025-01-02

Missing Authorization vulnerability in WPDeveloper BetterLinks betterlinks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BetterLinks: from n/a through <= 1.6.0.

CVE-2023-45110MEDIUMCVSS 4.3EG 4.3

2025-01-02

Missing Authorization vulnerability in boldthemes Bold Timeline Lite bold-timeline-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bold Timeline Lite: from n/a through <= 1.1.9.

CVE-2023-45240MEDIUMCVSS 5.5EG 5.5

2023-10-05

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 35739.

CVE-2023-45242MEDIUMCVSS 5.5EG 5.5

2023-10-05

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 35739, Acronis Cyber Protect 17 (Linux, macOS, Windows) before build…

CVE-2023-45243MEDIUMCVSS 5.5EG 5.5

2023-10-05

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 35739, Acronis Cyber Protect 17 (Linux, macOS, Windows) before build…

CVE-2023-45244HIGHCVSS 7.1EG 7.1

2023-10-06

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 35895, Acronis Cyber Protect 16 (Linux, macOS, Wind…

CVE-2023-45245MEDIUMCVSS 5.5EG 3.3

2023-10-06

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 36119.

CVE-2023-45246HIGHCVSS 7.1EG 7.1

2023-10-06

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 36343, Acronis Cyber Protect 16 (Linux, macOS, Wind…

CVE-2023-45247HIGHCVSS 7.1EG 7.1

2023-10-09

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 36497, Acronis Cyber Protect 16 (Linux, macOS, Wind…

CVE-2023-45271MEDIUMCVSS 4.3EG 4.3

2025-01-02

Missing Authorization vulnerability in WPXPO WowStore product-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WowStore: from n/a through <= 2.7.8.

CVE-2023-45272MEDIUMCVSS 5.4EG 5.4

2025-01-02

Missing Authorization vulnerability in 10Web 10Web Map Builder for Google Maps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 10Web Map Builder for Google Maps: from n/a through 1.0.73.

CVE-2023-45275MEDIUMCVSS 6.5EG 6.5

2025-01-02

Missing Authorization vulnerability in WP Chill Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kali Forms: from n/a through <= 2.3.28.

CVE-2023-45370MEDIUMCVSS 5.3EG 5.3

2023-10-09

An issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. SportsTeams: Special:SportsManagerLogo and Special:SportsTeamsManagerLogo do not check for th…

CVE-2023-45596MEDIUMCVSS 5.3EG 5.3

2024-03-05

A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “file_configuration” functionality of the web application allows a remote unauthenticated attacker to access confidential configuration files. This issue affects: …

CVE-2023-45598MEDIUMCVSS 5.3EG 5.3

2024-03-05

A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “measure” functionality of the web application allows a remote unauthenticated attacker to access confidential measure information. This issue affects: AiLux imx6 …

CVE-2023-45631MEDIUMCVSS 4.3EG 4.3

2025-01-02

Missing Authorization vulnerability in wpdevart Responsive Image Gallery, Gallery Album allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Image Gallery, Gallery Album: from n/a through 2.…

CVE-2023-45633MEDIUMCVSS 6.5EG 6.5

2025-01-02

Missing Authorization vulnerability in IDX IMPress Listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IMPress Listings: from n/a through 2.6.2.

CVE-2023-45636MEDIUMCVSS 5.4EG 5.4

2025-01-02

Missing Authorization vulnerability in WebToffee WordPress Backup & Migration wp-migration-duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Backup & Migration: from n/a through…

CVE-2023-45649MEDIUMCVSS 5.3EG 5.3

2025-01-02

Missing Authorization vulnerability in codepeople Appointment Hour Booking appointment-hour-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Appointment Hour Booking: from n/a through <= 1.…

CVE-2023-45658HIGHCVSS 7.6EG 7.6

2024-06-19

Missing Authorization vulnerability in POSIMYTH Nexter.This issue affects Nexter: from n/a through 2.0.3.

CVE-2023-45760MEDIUMCVSS 4.3EG 4.3

2025-01-02

Missing Authorization vulnerability in AdvancedCoding wpDiscuz wpdiscuz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects wpDiscuz: from n/a through <= 7.6.3.

CVE-2023-45765MEDIUMCVSS 4.3EG 4.3

2025-01-02

Missing Authorization vulnerability in weDevs WP ERP erp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP ERP: from n/a through <= 1.12.6.

CVE-2023-45766MEDIUMCVSS 5.3EG 5.3

2025-01-02

Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through <= 4.7.1.

CVE-2023-45828MEDIUMCVSS 5.4EG 5.4

2025-01-02

Missing Authorization vulnerability in RumbleTalk RumbleTalk Live Group Chat rumbletalk-chat-a-chat-with-themes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RumbleTalk Live Group Chat: from n/a…

CVE-2023-4600MEDIUMCVSS 4.3EG 4.3

2023-08-30

The AffiliateWP for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'affwp_activate_addons_page_plugin' function called via an AJAX action in versions up to, and including, 2.14.0. This…

CVE-2023-4606HIGHCVSS 8.1EG 8.1

2023-10-25

An authenticated XCC user with Read-Only permission can change a different user’s password through a crafted API command. This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected.

CVE-2023-46073MEDIUMCVSS 5.3EG 5.3

2025-01-02

Missing Authorization vulnerability in Mario Peshev DX Delete Attached Media dx-delete-attached-media allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DX Delete Attached Media: from n/a through <= …

CVE-2023-46079MEDIUMCVSS 5.4EG 5.4

2025-01-02

Missing Authorization vulnerability in WP Royal Ashe Extra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ashe Extra: from n/a through 1.2.9.

CVE-2023-46080MEDIUMCVSS 4.3EG 4.3

2025-01-02

Missing Authorization vulnerability in Farhan Noor ApplyOnline – Application Form Builder and Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ApplyOnline – Application Form Builder and…

CVE-2023-46082MEDIUMCVSS 5.3EG 5.3

2025-01-02

Missing Authorization vulnerability in Cyberlord92 Broken Link Checker | Finder broken-link-finder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broken Link Checker | Finder: from n/a through <=…

CVE-2023-46083MEDIUMCVSS 5.3EG 5.3

2025-01-02

Missing Authorization vulnerability in WP Chill Kali Forms kali-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kali Forms: from n/a through <= 2.3.27.

CVE-2023-46146HIGHCVSS 8.3EG 8.3

2024-06-19

Missing Authorization vulnerability in Themify Themify Ultra.This issue affects Themify Ultra: from n/a through 7.3.5.

CVE-2023-46148HIGHCVSS 8.8EG 8.8

2024-06-19

Missing Authorization vulnerability in Themify Themify Ultra.This issue affects Themify Ultra: from n/a through 7.3.5.

CVE-2023-46188MEDIUMCVSS 4.3EG 4.3

2025-01-02

Missing Authorization vulnerability in Jose Mortellaro Freesoul Deactivate Plugins – Plugin manager and cleanup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Freesoul Deactivate Plugins – Pl…

CVE-2023-46195MEDIUMCVSS 6.5EG 6.5

2025-01-02

Missing Authorization vulnerability in CoSchedule Headline Analyzer headline-analyzer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Headline Analyzer: from n/a through <= 1.3.1.

CVE-2023-46196MEDIUMCVSS 4.3EG 4.3

2025-01-02

Missing Authorization vulnerability in Repuso Social proof testimonials and reviews by Repuso social-testimonials-and-reviews-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social proof te…

CVE-2023-46203MEDIUMCVSS 4.3EG 4.3

2025-01-02

Missing Authorization vulnerability in JustCoded / Alex Prokopenko Just Custom Fields allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Just Custom Fields: from n/a through 3.3.2.

CVE-2023-46206MEDIUMCVSS 5.3EG 5.3

2025-01-02

Missing Authorization vulnerability in Webの相談所 MW WP Form mw-wp-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MW WP Form: from n/a through <= 4.4.5.

CVE-2023-46212MEDIUMCVSS 6.3EG 6.3

2023-12-19

Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in TienCOP WP EXtra allows Accessing Functionality Not Properly Constrained by ACLs, Cross Site Request Forgery.This issue affects WP EXtra: from n/a through 6.2.

CVE-2023-4627MEDIUMCVSS 4.3EG 4.3

2024-03-12

The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_config() function in versions up to, and including, 4.4. This makes it possible for authenticated attackers w…

CVE-2023-4630MEDIUMCVSS 5.0EG 5.0

2023-09-11

An issue has been discovered in GitLab affecting all versions starting from 10.6 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1 in which any user can read limited information abo…

CWE-862— Missing Authorization

CVEs classified under CWE-862page 53 of 153

Map vulnerabilities like CWE-862 to your infrastructure