CVE-2022-41930

org.xwiki.platform:xwiki-platform-user-profile-ui is missing authorization to enable or disable users. Any user logged in or not with access to the page XWiki.XWikiUserProfileSheet can enable or disable any user profile. This might allow to a disabled user to re-enable themselves, or to an attack...

CVE-2022-2595

Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1...

CVE-2020-13263

An authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 and later through 13.0.1 that could allow unauthorized users to impersonate as a maintainer to perform limited actions...

CVE-2020-26832

SAP AS ABAP SAP Landscape Transformation, versions - 20111620, 20111640, 20111700, 20111710, 20111730, 20111731, 20111752, 2020 and SAP S4 HANA SAP Landscape Transformation, versions - 101, 102, 103, 104, 105, allows a high privileged user to execute a RFC function module to which access should b...

CVE-2024-52383

Missing Authorization vulnerability in aitool Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One ai-auto-tool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ai Auto Tool Content Writing Assistant Gemini Writer, ChatGPT All in One:...

CVE-2024-1738

An incorrect authorization vulnerability exists in the lunary-ai/lunary repository, specifically within the evaluations.get route in the evaluations API endpoint. This vulnerability allows unauthorized users to retrieve the results of any organization's evaluation by simply knowing the evaluation...

CVE-2024-31304

Missing Authorization vulnerability in MultiVendorX WC Marketplace.This issue affects WC Marketplace: from n/a through 4.1.3...

PT-2025-5705 · Cisco · Cisco Ise

Name of the Vulnerable Software and Affected Versions: Cisco ISE affected versions not specified Description: A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker with valid read-only credentials to obtain sensitive information, change node configurations, and...

PT-2025-4617 · Uiux · Uiux Lab Uix Shortcodes

Name of the Vulnerable Software and Affected Versions: UIUX Lab Uix Shortcodes versions prior to 2.0.3 Description: The issue is related to a lack of authorization in UIUX Lab Uix Shortcodes, allowing the exploitation of incorrectly configured access control security levels. Recommendations: For...

CVE-2024-13775 WooCommerce Support Ticket System <= 17.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Information Exposure

The WooCommerce Support Ticket System plugin for WordPress is vulnerable to unauthorized access and loss of data due to missing capability checks on the 'ajaxdeletemessage', 'ajaxgetcustomerspartiallist', and 'ajaxgetadminslist' functions in all versions up to, and including, 17.8. This makes it...

CVE-2025-22720

CVE-2025-22720 corresponds to a Missing Authorization vulnerability in MagePeople Team Booking and Rental Manager (WordPress plugin) affecting versions up to 2.2.1. The issue stems from incorrectly configured access control, enabling bypass of authorization. CVSS v3.1 base score is 5.8 (Scope: Ch...

CVE-2025-22265

CVE-2025-22265 is a Missing Authorization vulnerability affecting mgplugin EMI Calculator (WordPress plugin). The connected Red Hat and PT Security sources specify a misconfiguration of access controls (Incorrectly Configured Access Control Security Levels) that enables exploitation due to insuff...

CVE-2024-13717

CVE-2024-13717 affects the WordPress plugin Contact Form and Calls To Action by vcita, up to and including version 2.7.1. The flaw is a missing capability check in the vcita_ajax_toggle_ae and vcita_ajax_toggle_contact functions, allowing authenticated attackers with subscriber-level access and a...

CVE-2025-24603

Missing Authorization vulnerability in Dmitry V. CEO of "UKR Solution" Print Barcode Labels for your WooCommerce products/orders a4-barcode-generator.This issue affects Print Barcode Labels for your WooCommerce products/orders: from n/a through = 3.4.10...

CVE-2025-24747

CVE-2025-24747 describes a missing authorization vulnerability in the Houzez WordPress theme (affected: v1.x through 3.4.0). The Red Hat and CVE-Listing entries identify it as a Missing Authorization / Broken Access Control issue affecting Houzez up to version 3.4.0. The vulnerability is technica...

CVE-2025-24653 WordPress Admin and Site Enhancements (ASE) Pro Plugin <= 7.6.1.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in NotFound Admin and Site Enhancements ASE Pro allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Admin and Site Enhancements ASE Pro: from n/a through 7.6.1.1...

PT-2025-5427 · Haptiq · Picu – Online Photo Proofing Gallery

Name of the Vulnerable Software and Affected Versions: picu – Online Photo Proofing Gallery versions prior to 2.4.0 Description: The issue is related to a lack of authorization in Haptiq picu – Online Photo Proofing Gallery, which allows the exploitation of incorrectly configured access control...

PT-2025-5476 · Unknown · Admin/Site Enhancements (Ase) Pro

Name of the Vulnerable Software and Affected Versions: Admin and Site Enhancements ASE Pro versions n/a through 7.6.1.1 Description: The issue is related to a lack of authorization in Admin and Site Enhancements ASE Pro, which allows the exploitation of incorrectly configured access control...

CVE-2025-24736 WordPress Post Duplicator plugin <= 2.35 - Broken Access Control vulnerability

Missing Authorization vulnerability in metaphorcreations Post Duplicator post-duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Duplicator: from n/a through = 2.35...

CVE-2025-24682 WordPress Super Block Slider plugin <= 2.7.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in mikemmx Super Block Slider allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Super Block Slider: from n/a through 2.7.9...