Vulnerabilities (CVE)

Filtered by CWE-862
Total 3170 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-32777 2024-11-21 N/A 7.5 HIGH
Missing Authorization vulnerability in BizSwoop a CPF Concepts, LLC Brand BizPrint.This issue affects BizPrint: from n/a through 4.3.39.
CVE-2024-32776 2024-11-21 N/A 6.5 MEDIUM
Missing Authorization vulnerability in AppPresser Team AppPresser.This issue affects AppPresser: from n/a through 4.3.0.
CVE-2024-32731 2024-11-21 N/A 5.5 MEDIUM
SAP My Travel Requests does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation, the attacker can upload a malicious attachment to a business trip request which will lead to a low impact on the confidentiality, integrity and availability of the application. 
CVE-2024-32730 2024-11-21 N/A 6.5 MEDIUM
SAP Enable Now Manager does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation, the attacker with the role 'Learner' could gain access to other user's data in manager which will lead to a high impact to the confidentiality of the application.
CVE-2024-32727 2024-11-21 N/A 5.3 MEDIUM
Missing Authorization vulnerability in Rometheme RomethemeForm For Elementor.This issue affects RomethemeForm For Elementor: from n/a through 1.1.2.
CVE-2024-32725 2024-11-21 N/A 5.3 MEDIUM
Missing Authorization vulnerability in Saleswonder 5 Stars Rating Funnel.This issue affects 5 Stars Rating Funnel: from n/a through 1.2.67.
CVE-2024-32724 2024-11-21 N/A 7.5 HIGH
Missing Authorization vulnerability in Woo product importer Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy.This issue affects Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy: from n/a through 2.1.1.
CVE-2024-32719 2024-11-21 N/A 5.3 MEDIUM
Missing Authorization vulnerability in WP Club Manager.This issue affects WP Club Manager: from n/a through 2.2.11.
CVE-2024-32717 2024-11-21 N/A 6.5 MEDIUM
Missing Authorization vulnerability in WPDeveloper SchedulePress.This issue affects SchedulePress: from n/a through 5.0.8.
CVE-2024-32715 2024-11-21 N/A 5.3 MEDIUM
Missing Authorization vulnerability in Olive Themes Olive One Click Demo Import.This issue affects Olive One Click Demo Import: from n/a through 1.1.1.
CVE-2024-32714 2024-11-21 N/A 4.3 MEDIUM
Missing Authorization vulnerability in Academy LMS academy.This issue affects Academy LMS: from n/a through 1.9.16.
CVE-2024-32713 1 Autowriter 1 Ai Post Generator \| Autowriter 2024-11-21 N/A 5.4 MEDIUM
Missing Authorization vulnerability in AutoWriter AI Post Generator | AutoWriter.This issue affects AI Post Generator | AutoWriter: from n/a through 3.3.
CVE-2024-32712 2024-11-21 N/A 7.5 HIGH
Missing Authorization vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlove Podcast Publisher: from n/a through 4.0.14.
CVE-2024-32705 1 Reputeinfosystems 1 Arforms 2024-11-21 N/A 7.1 HIGH
Missing Authorization vulnerability in reputeinfosystems ARForms.This issue affects ARForms: from n/a through 6.4.
CVE-2024-32704 1 Reputeinfosystems 1 Arforms 2024-11-21 N/A 7.1 HIGH
Missing Authorization vulnerability in reputeinfosystems ARForms.This issue affects ARForms: from n/a through 6.4.
CVE-2024-32703 1 Reputeinfosystems 1 Arforms 2024-11-21 N/A 7.7 HIGH
Missing Authorization vulnerability in reputeinfosystems ARForms.This issue affects ARForms: from n/a through 6.4.
CVE-2024-32701 1 Instawp 1 Instawp Connect 2024-11-21 N/A 4.3 MEDIUM
Missing Authorization vulnerability in InstaWP Team InstaWP Connect.This issue affects InstaWP Connect: from n/a through 0.1.0.24.
CVE-2024-32692 2024-11-21 N/A 8.2 HIGH
Missing Authorization vulnerability in QuanticaLabs Chauffeur Taxi Booking System for WordPress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Chauffeur Taxi Booking System for WordPress: from n/a through 6.9.
CVE-2024-32691 2024-11-21 N/A 5.3 MEDIUM
Missing Authorization vulnerability in realmag777 Active Products Tables for WooCommerce.This issue affects Active Products Tables for WooCommerce: from n/a through 1.0.6.2.
CVE-2024-32689 2024-11-21 N/A 4.3 MEDIUM
Missing Authorization vulnerability in GenialSouls WP Social Comments.This issue affects WP Social Comments: from n/a through 1.7.3.