CWE-862 <span class="text-2xl md:text-3xl font-bold ml-2" style="color:var(--text-secondary)">— Missing Authorization

CVE-2024-32824MEDIUMCVSS 5.4EG 5.4

Missing Authorization vulnerability in impleCode Reviews Plus.This issue affects Reviews Plus: from n/a through 1.3.4.

CVE-2024-32826MEDIUMCVSS 5.3EG 5.3

Missing Authorization vulnerability in Evergreen Content Poster Evergreen Content Poster evergreen-content-poster.This issue affects Evergreen Content Poster: from n/a through <= 1.4.2.

CVE-2024-32828MEDIUMCVSS 4.3EG 4.3

Missing Authorization vulnerability in Vektor,Inc. VK Block Patterns.This issue affects VK Block Patterns: from n/a through 1.31.0.

CVE-2024-32829MEDIUMCVSS 4.3EG 4.3

Missing Authorization vulnerability in Octolize Flexible Shipping.This issue affects Flexible Shipping: from n/a through 4.24.15.

CVE-2024-32832CRITICALCVSS 9.8EG 9.8

Missing Authorization vulnerability in Supsystic Data Tables Generator by Supsystic.This issue affects Data Tables Generator by Supsystic: from n/a through 1.10.31.

2025-08-31

Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through <= 1.6.93.

CVE-2024-3287MEDIUMCVSS 5.3EG 5.3

2024-05-02

The SmartCrawl WordPress SEO checker, SEO analyzer, SEO optimizer plugin for WordPress is vulnerable to unauthorized ld+json description injection due to a missing capability check on the save_settings function in all versions up to, and i…

CVE-2024-32948CRITICALCVSS 9.1EG 9.1

2024-04-24

Missing Authorization vulnerability in Repute Infosystems ARMember.This issue affects ARMember: from n/a through 4.0.28.

CVE-2024-3295MEDIUMCVSS 6.5EG 6.5

2024-05-02

The User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the profile_pic_remove function in versi…

CVE-2024-32951MEDIUMCVSS 6.5EG 6.5

2024-04-24

Missing Authorization vulnerability in BloomPixel Max Addons Pro for Bricks.This issue affects Max Addons Pro for Bricks: from n/a through 1.6.1.

CVE-2024-32957MEDIUMCVSS 4.7EG 4.7

CVE-2024-33000LOWCVSS 3.5EG 3.5

Missing Authorization vulnerability in Live Composer Team Page Builder: Live Composer.This issue affects Page Builder: Live Composer: from n/a through 1.5.38.

2024-05-14

SAP Bank Account Management does not perform necessary authorization check for an authorized user, resulting in escalation of privileges. As a result, it has a low impact to confidentiality to the system.

CVE-2024-33005MEDIUMCVSS 6.3EG 6.3

2024-08-13

Due to the missing authorization checks in the local systems, the admin users of SAP Web Dispatcher, SAP NetWeaver Application Server (ABAP and Java), and SAP Content Server can impersonate other users and may perform some unintended actio…

CVE-2024-3305HIGHCVSS 7.5EG 7.5

2024-09-12

Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in Utarit Information SoliClub allows Retrieve Embedded Sensitive Data. This issue affects SoliClub: before 4.4.0 for iOS, before 5.2.1 for Android.

CVE-2024-3312MEDIUMCVSS 5.3EG 5.3

2024-05-02

The Easy Custom Auto Excerpt plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.4.12. This makes it possible for unauthenticated attackers to obtain excerpts of password-protected p…

CVE-2024-33543HIGHCVSS 7.5EG 7.5

CVE-2024-33545MEDIUMCVSS 5.3EG 5.3

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.06.

CVE-2024-33547HIGHCVSS 8.3EG 8.3

Missing Authorization vulnerability in AA-Team WZone.This issue affects WZone: from n/a through 14.0.10.

CVE-2024-33555HIGHCVSS 8.1EG 8.1

Missing Authorization vulnerability in AA-Team WZone.This issue affects WZone: from n/a through 14.0.10.

CVE-2024-33558MEDIUMCVSS 6.5EG 6.5

Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8.

CVE-2024-33561HIGHCVSS 7.5EG 7.5

Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.5.

CVE-2024-33563HIGHCVSS 7.6EG 7.6

Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8.

CVE-2024-33564HIGHCVSS 8.8EG 8.8

Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8.

CVE-2024-33565CRITICALCVSS 9.1EG 9.1

Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8.

CVE-2024-33566CRITICALCVSS 10.0EG 10.0

Missing Authorization vulnerability in UkrSolution Barcode Scanner with Inventory & Order Manager.This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through 1.5.3.

CVE-2024-33570MEDIUMCVSS 4.3EG 4.3

Missing Authorization vulnerability in N-Media OrderConvo allows OS Command Injection.This issue affects OrderConvo: from n/a through 12.4.

2024-05-06

Missing Authorization vulnerability in Roxnor Metform metform.This issue affects Metform: from n/a through <= 3.8.3.

CVE-2024-33572MEDIUMCVSS 4.3EG 4.3

CVE-2024-33573MEDIUMCVSS 4.3EG 4.3

Missing Authorization vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor.This issue affects Nexter Blocks: from n/a through <= 3.2.5.

2024-05-08

Missing Authorization vulnerability in EPROLO EPROLO Dropshipping.This issue affects EPROLO Dropshipping: from n/a through 1.7.1.

CVE-2024-33574MEDIUMCVSS 4.3EG 4.3

2024-05-08

Missing Authorization vulnerability in appsbd Vitepos.This issue affects Vitepos: from n/a through 3.0.1.

CVE-2024-33576MEDIUMCVSS 6.5EG 6.5

2024-05-06

Missing Authorization vulnerability in Ollybach WPPizza.This issue affects WPPizza: from n/a through 3.18.10.

CVE-2024-33585MEDIUMCVSS 4.3EG 4.3

CVE-2024-33586MEDIUMCVSS 5.3EG 5.3

Missing Authorization vulnerability in Tyche Softwares Payment Gateway Based Fees and Discounts for WooCommerce.This issue affects Payment Gateway Based Fees and Discounts for WooCommerce: from n/a through 2.12.1.

CVE-2024-33587MEDIUMCVSS 5.3EG 5.3

Missing Authorization vulnerability in Photo Gallery Team Photo Gallery by 10Web.This issue affects Photo Gallery by 10Web: from n/a through 1.8.20.

CVE-2024-33588MEDIUMCVSS 5.4EG 5.4

Missing Authorization vulnerability in Copy Content Protection Team Secure Copy Content Protection and Content Locking.This issue affects Secure Copy Content Protection and Content Locking: from n/a through 3.9.0.

CVE-2024-33589MEDIUMCVSS 6.5EG 6.5

Missing Authorization vulnerability in codeSavory Knowledge Base documentation & wiki plugin – BasePress.This issue affects Knowledge Base documentation & wiki plugin – BasePress: from n/a through 2.16.1.

CVE-2024-33591HIGHCVSS 7.5EG 7.5

Missing Authorization vulnerability in WPOmnia KB Support.This issue affects KB Support: from n/a through 1.6.0.

CVE-2024-33593MEDIUMCVSS 4.3EG 4.3

Missing Authorization vulnerability in Tips and Tricks HQ Easy Accept Payments.This issue affects Easy Accept Payments: from n/a through 4.9.10.

CVE-2024-33594HIGHCVSS 7.5EG 7.5

Missing Authorization vulnerability in RedNao Smart Forms.This issue affects Smart Forms: from n/a through 2.6.91.

CVE-2024-33595MEDIUMCVSS 4.3EG 4.3

Missing Authorization vulnerability in Leaky Paywall.This issue affects Leaky Paywall: from n/a through 4.20.8.

CVE-2024-33596MEDIUMCVSS 5.3EG 5.3

Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor.This issue affects Master Addons for Elementor: from n/a through 2.0.5.4.1.

CVE-2024-33597HIGHCVSS 7.5EG 7.5

Missing Authorization vulnerability in Five Star Plugins Five Star Restaurant Reservations.This issue affects Five Star Restaurant Reservations: from n/a through 2.6.16.

CVE-2024-33606HIGHCVSS 8.8EG 8.8

Missing Authorization vulnerability in ProFaceOff SSU.This issue affects SSU: from n/a through 1.5.0.

2024-06-11

An attacker could retrieve sensitive files (medical images) as well as plant new medical images or overwrite existing medical images on a MicroDicom DICOM Viewer system. User interaction is required to exploit this vulnerability.

CVE-2024-33635HIGHCVSS 7.5EG 7.5

CVE-2024-33636MEDIUMCVSS 5.4EG 5.4

Missing Authorization vulnerability in Piotnet Piotnet Addons For Elementor Pro.This issue affects Piotnet Addons For Elementor Pro: from n/a through 7.1.17.

CVE-2024-33652MEDIUMCVSS 5.3EG 5.3

Missing Authorization vulnerability in Mahesh Vora WP Page Post Widget Clone.This issue affects WP Page Post Widget Clone: from n/a through 1.0.1.

CVE-2024-33667MEDIUMCVSS 6.5EG 6.5

Missing Authorization vulnerability in Real Big Plugins Client Dash.This issue affects Client Dash: from n/a through 2.2.1.

CVE-2024-33684MEDIUMCVSS 6.5EG 6.5

An issue was discovered in Zammad before 6.3.0. An authenticated agent could perform a remote Denial of Service attack by calling an endpoint that accepts a generic method name, which was not properly sanitized against an allowlist.

CVE-2024-33686MEDIUMCVSS 4.3EG 4.3

Missing Authorization vulnerability in Pdfcrowd Save as PDF plugin by Pdfcrowd allows Stored XSS.This issue affects Save as PDF plugin by Pdfcrowd: from n/a through 3.2.0.