CWE-862 <span class="text-2xl md:text-3xl font-bold ml-2" style="color:var(--text-secondary)">— Missing Authorization

CVE-2024-32675MEDIUMCVSS 6.5EG 6.5

Ant Media Server is live streaming engine software. A local privilege escalation vulnerability in present in versions 2.6.0 through 2.8.2 allows any unprivileged operating system user account to escalate privileges to the root user account…

2024-04-24

Missing Authorization vulnerability in Xfinity Soft Order Limit for WooCommerce.This issue affects Order Limit for WooCommerce: from n/a through 2.0.0.

CVE-2024-32677MEDIUMCVSS 5.3EG 6.5

2024-04-24

Missing Authorization vulnerability in LoginPress LoginPress Pro.This issue affects LoginPress Pro: from n/a before 3.0.0.

CVE-2024-32678MEDIUMCVSS 5.3EG 5.3

2024-04-24

Missing Authorization vulnerability in TrackShip TrackShip for WooCommerce.This issue affects TrackShip for WooCommerce: from n/a through 1.7.5.

CVE-2024-32679MEDIUMCVSS 5.3EG 5.3

2024-04-23

Missing Authorization vulnerability in Anssi Laitila Shared Files shared-files.This issue affects Shared Files: from n/a through <= 1.7.16.

CVE-2024-3268MEDIUMCVSS 5.3EG 5.3

2024-05-21

The YouTube Video Gallery by YouTube Showcase – Video Gallery Plugin for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the emd_form_builder_lite_submit_form functio…

CVE-2024-32681MEDIUMCVSS 4.3EG 4.3

CVE-2024-32682HIGHCVSS 7.1EG 7.1

Missing Authorization vulnerability in BdThemes Prime Slider – Addons For Elementor.This issue affects Prime Slider – Addons For Elementor: from n/a through 3.13.2.

CVE-2024-32684MEDIUMCVSS 5.3EG 5.3

Missing Authorization vulnerability in BdThemes Prime Slider – Addons For Elementor.This issue affects Prime Slider – Addons For Elementor: from n/a through 3.13.2.

CVE-2024-32687MEDIUMCVSS 4.3EG 4.3

Missing Authorization vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2.5.

CVE-2024-32688MEDIUMCVSS 6.5EG 6.5

Missing Authorization vulnerability in WPClever WPC Frequently Bought Together for WooCommerce.This issue affects WPC Frequently Bought Together for WooCommerce: from n/a through 7.0.3.

CVE-2024-32689MEDIUMCVSS 4.3EG 4.3

Missing Authorization vulnerability in Long Watch Studio MyRewards.This issue affects MyRewards: from n/a through 5.3.0.

2024-04-18

Missing Authorization vulnerability in GenialSouls WP Social Comments.This issue affects WP Social Comments: from n/a through 1.7.3.

CVE-2024-32691MEDIUMCVSS 5.3EG 5.3

CVE-2024-32692HIGHCVSS 8.2EG 8.2

Missing Authorization vulnerability in realmag777 Active Products Tables for WooCommerce.This issue affects Active Products Tables for WooCommerce: from n/a through 1.0.6.2.

2024-05-17

Missing Authorization vulnerability in QuanticaLabs Chauffeur Taxi Booking System for WordPress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Chauffeur Taxi Booking System for WordPress: from n/a throug…

CVE-2024-32701MEDIUMCVSS 4.3EG 4.3

CVE-2024-32704HIGHCVSS 7.1EG 7.1

Missing Authorization vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through <= 0.1.0.24.

CVE-2024-32705HIGHCVSS 7.1EG 7.1

Missing Authorization vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4.

CVE-2024-32712HIGHCVSS 7.5EG 7.5

Missing Authorization vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through <= 6.4.

CVE-2024-32713MEDIUMCVSS 5.4EG 5.4

Missing Authorization vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlove Podcast Publisher: from n/a through 4.0.14.

CVE-2024-32714MEDIUMCVSS 4.3EG 4.3

Missing Authorization vulnerability in AutoWriter AI Post Generator | AutoWriter.This issue affects AI Post Generator | AutoWriter: from n/a through 3.3.

CVE-2024-32715HIGHCVSS 7.5EG 5.3

Missing Authorization vulnerability in Academy LMS academy.This issue affects Academy LMS: from n/a through 1.9.16.

CVE-2024-32717MEDIUMCVSS 6.5EG 6.5

Missing Authorization vulnerability in Olive Themes Olive One Click Demo Import.This issue affects Olive One Click Demo Import: from n/a through 1.1.1.

CVE-2024-32719MEDIUMCVSS 5.3EG 5.3

Missing Authorization vulnerability in WPDeveloper SchedulePress.This issue affects SchedulePress: from n/a through 5.0.8.

CVE-2024-32724HIGHCVSS 7.5EG 7.5

Missing Authorization vulnerability in WP Club Manager WP Club Manager wp-club-manager.This issue affects WP Club Manager: from n/a through <= 2.2.11.

CVE-2024-32725MEDIUMCVSS 5.3EG 5.3

Missing Authorization vulnerability in Woo product importer Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy.This issue affects Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy: from n/a through 2.1.1.

CVE-2024-32727MEDIUMCVSS 5.3EG 5.3

Missing Authorization vulnerability in Saleswonder Team: Tobias 5 Stars Rating Funnel 5-stars-rating-funnel.This issue affects 5 Stars Rating Funnel: from n/a through <= 1.2.67.

CVE-2024-32730MEDIUMCVSS 6.5EG 6.5

Missing Authorization vulnerability in Rometheme RomethemeForm For Elementor.This issue affects RomethemeForm For Elementor: from n/a through 1.1.2.

CVE-2024-32731MEDIUMCVSS 5.5EG 5.5

SAP Enable Now Manager does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation, the attacker with the role 'Learner' could gain access to other user's dat…

CVE-2024-3275MEDIUMCVSS 4.3EG 4.3

SAP My Travel Requests does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation, the attacker can upload a malicious attachment to a business trip request…

2024-05-02

The eRoom – Zoom Meetings & Webinars plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.18 via the search_posts function. This makes it possible for authenticated attackers, wit…

CVE-2024-3277MEDIUMCVSS 5.0EG 5.0

2024-05-30

The Yumpu ePaper publishing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_handler function in all versions up to, and including, 2.0.24. This makes it possible for aut…

CVE-2024-32776MEDIUMCVSS 6.5EG 6.5

CVE-2024-32777HIGHCVSS 7.5EG 7.5

Missing Authorization vulnerability in AppPresser Team AppPresser.This issue affects AppPresser: from n/a through 4.3.0.

CVE-2024-32779MEDIUMCVSS 5.3EG 5.3

Missing Authorization vulnerability in BizSwoop a CPF Concepts, LLC Brand BizPrint.This issue affects BizPrint: from n/a through 4.3.39.

CVE-2024-32783MEDIUMCVSS 4.3EG 4.3

Missing Authorization vulnerability in Avirtum Vision Interactive.This issue affects Vision Interactive: from n/a through 1.7.1.

CVE-2024-32784MEDIUMCVSS 4.3EG 4.3

Missing Authorization vulnerability in wpcreativeidea Advanced Testimonial Carousel for Elementor.This issue affects Advanced Testimonial Carousel for Elementor: from n/a through 3.0.0.

CVE-2024-32787MEDIUMCVSS 4.3EG 4.3

Missing Authorization vulnerability in CookieHub.This issue affects CookieHub: from n/a through 1.1.0.

CVE-2024-32792MEDIUMCVSS 4.3EG 4.3

Missing Authorization vulnerability in Copy Content Protection Team Secure Copy Content Protection and Content Locking.This issue affects Secure Copy Content Protection and Content Locking: from n/a through 3.7.1.

CVE-2024-32797MEDIUMCVSS 5.4EG 5.4

Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hummingbird hummingbird-performance.This issue affects Hummingbird: from n/a through <= 3.7.3.

CVE-2024-32798HIGHCVSS 7.5EG 7.5

Missing Authorization vulnerability in Martin Gibson WP LinkedIn Auto Publish.This issue affects WP LinkedIn Auto Publish: from n/a through 8.11.

CVE-2024-32799MEDIUMCVSS 5.3EG 5.3

Missing Authorization vulnerability in WP Travel Engine.This issue affects WP Travel Engine: from n/a through 5.8.0.

CVE-2024-32802MEDIUMCVSS 5.3EG 5.3

Missing Authorization vulnerability in Merv Barrett Easy Property Listings.This issue affects Easy Property Listings: from n/a through 3.5.3.

2024-05-17

Missing Authorization vulnerability in WordPlus BP Better Messages allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BP Better Messages: from n/a through 2.4.32.

CVE-2024-32804MEDIUMCVSS 4.3EG 4.3

CVE-2024-32805MEDIUMCVSS 6.5EG 6.5

Missing Authorization vulnerability in Martin Gibson WP GoToWebinar.This issue affects WP GoToWebinar: from n/a through 14.46.

CVE-2024-32810HIGHCVSS 7.6EG 7.6

Missing Authorization vulnerability in Social Snap.This issue affects Social Snap: from n/a through 1.3.5.

2024-05-03

Missing Authorization vulnerability in ShortPixel ShortPixel Critical CSS.This issue affects ShortPixel Critical CSS: from n/a through 1.0.2.

CVE-2024-32813MEDIUMCVSS 5.3EG 5.3

CVE-2024-32814MEDIUMCVSS 5.3EG 5.3

Missing Authorization vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.9.

CVE-2024-32818MEDIUMCVSS 4.3EG 4.3

Missing Authorization vulnerability in Zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pickup for WooCommerce: from n/a through 1.6.1.

CVE-2024-32820MEDIUMCVSS 5.3EG 5.3

Missing Authorization vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF).This issue affects WordPress Meta Data and Taxonomies Filter (MDTF): from n/a through 1.3.3.