Vulnerability index

Browse CVEs

6,913 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Missing AuthorizationCWE-862 × clear
Unclassified MEDIUM 6.5
CVE-2025-67624

Missing Authorization vulnerability in Arya Dhiratara Optimize More! – Images optimize-more-images allows Exploiting Incorrectly Configured Access Co…

Mitigation only
Fix from $1,600 2026-02-20
Unclassified HIGH 7.6
CVE-2025-53217

Missing Authorization vulnerability in staviravn AIO WP Builder all-in-one-wp-builder allows Exploiting Incorrectly Configured Access Control Securit…

Mitigation only
Fix from $1,950 2026-02-20
Unclassified MEDIUM 5.3
CVE-2024-43228

Missing Authorization vulnerability in SecuPress SecuPress Free secupress.This issue affects SecuPress Free: from n/a through <= 2.2.5.3.

Mitigation only
Fix from $1,600 2026-02-20
Unclassified MEDIUM 5.3
CVE-2024-34438

Missing Authorization vulnerability in Anssi Laitila Shared Files shared-files.This issue affects Shared Files: from n/a through <= 1.7.19.

Mitigation only
Fix from $1,600 2026-02-20
Unclassified MEDIUM 6.3
CVE-2026-2819

A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.5.3. This vulnerability affects the function SaServletFilter of the file /workflow/i…

Mitigation only
Fix from $1,600 2026-02-20
Learning MEDIUM 5.3
CVE-2026-26977

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In versions 2.44.0 and below, unauthorized use…

Fix: 2.45.0+
Fix from $1,600 2026-02-20
Cyber Protect CRITICAL 10.0
CVE-2025-30416

Sensitive data disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect 16 (Linux, Window…

Mitigation only
Fix from $2,300 2026-02-20
Unclassified MEDIUM 5.3
CVE-2026-27368

Missing Authorization vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon allows Exploiting Inc…

Mitigation only
Fix from $1,600 2026-02-19
Unclassified MEDIUM 5.4
CVE-2026-27387

Missing Authorization vulnerability in Designinvento DirectoryPress directorypress allows Exploiting Incorrectly Configured Access Control Security L…

Mitigation only
Fix from $1,600 2026-02-19
Unclassified MEDIUM 5.3
CVE-2026-27328

Missing Authorization vulnerability in DevsBlink EduBlink edublink allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…

Mitigation only
Fix from $1,600 2026-02-19
Worktime MEDIUM 5.3
CVE-2025-15563

Any unauthenticated user can reset the WorkTime on-prem database configuration by sending a specific HTTP request to the WorkTime server. No authoriz…

Fix: after 11.8.8
Fix from $1,600 2026-02-19
Unclassified MEDIUM 6.5
CVE-2026-27092

Missing Authorization vulnerability in Greg Winiarski WPAdverts wpadverts allows Exploiting Incorrectly Configured Access Control Security Levels.Thi…

Mitigation only
Fix from $1,600 2026-02-19
Unclassified MEDIUM 5.3
CVE-2026-27042

Missing Authorization vulnerability in WPDeveloper NotificationX notificationx allows Exploiting Incorrectly Configured Access Control Security Level…

Mitigation only
Fix from $1,600 2026-02-19
Unclassified MEDIUM 5.4
CVE-2026-25473

Missing Authorization vulnerability in AA-Team WZone woozone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec…

Mitigation only
Fix from $1,600 2026-02-19
Unisphere For Powermax HIGH 8.8
CVE-2026-26358

Dell Unisphere for PowerMax, version(s) 10.2, contain(s) a Missing Authorization vulnerability. A low privileged attacker with remote access could po…

Fix: 10.3.0.1+
Fix from $1,950 2026-02-19
Unclassified MEDIUM 5.3
CVE-2026-25441

Missing Authorization vulnerability in varunvairavanlc LeadConnector leadconnector allows Exploiting Incorrectly Configured Access Control Security L…

Mitigation only
Fix from $1,600 2026-02-19
Unclassified MEDIUM 5.3
CVE-2026-25415

Missing Authorization vulnerability in iqonicdesign WPBookit Pro wpbookit-pro allows Exploiting Incorrectly Configured Access Control Security Levels…

Mitigation only
Fix from $1,600 2026-02-19
Unclassified MEDIUM 5.3
CVE-2026-25404

Missing Authorization vulnerability in Automattic WP Job Manager wp-job-manager allows Exploiting Incorrectly Configured Access Control Security Leve…

Mitigation only
Fix from $1,600 2026-02-19
Unclassified MEDIUM 5.3
CVE-2026-25408

Missing Authorization vulnerability in PluginRx Broken Link Notifier broken-link-notifier allows Exploiting Incorrectly Configured Access Control Sec…

Mitigation only
Fix from $1,600 2026-02-19
Unclassified MEDIUM 5.4
CVE-2026-25391

Missing Authorization vulnerability in WP Grids WP Wand ai-content-generation allows Exploiting Incorrectly Configured Access Control Security Levels…

Mitigation only
Fix from $1,600 2026-02-19
Unclassified MEDIUM 5.3
CVE-2026-25384

Missing Authorization vulnerability in WP Lab WP-Lister Lite for eBay wp-lister-for-ebay allows Exploiting Incorrectly Configured Access Control Secu…

Mitigation only
Fix from $1,600 2026-02-19
Unclassified MEDIUM 5.3
CVE-2026-25386

Missing Authorization vulnerability in Elementor Ally pojo-accessibility allows Exploiting Incorrectly Configured Access Control Security Levels.This…

Mitigation only
Fix from $1,600 2026-02-19
Unclassified MEDIUM 5.4
CVE-2026-25388

Missing Authorization vulnerability in scripteo Ads Pro ap-plugin-scripteo allows Exploiting Incorrectly Configured Access Control Security Levels.Th…

No fix yet
Fix from $1,600 2026-02-19
Unclassified MEDIUM 5.3
CVE-2026-25364

Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access C…

Mitigation only
Fix from $1,600 2026-02-19
Unclassified MEDIUM 5.3
CVE-2026-25367

Missing Authorization vulnerability in NooTheme CitiLights noo-citilights allows Exploiting Incorrectly Configured Access Control Security Levels.Thi…

Mitigation only
Fix from $1,600 2026-02-19
Unclassified MEDIUM 6.5
CVE-2026-25368

Missing Authorization vulnerability in codepeople Calculated Fields Form calculated-fields-form allows Exploiting Incorrectly Configured Access Contr…

Mitigation only
Fix from $1,600 2026-02-19
Unclassified MEDIUM 5.3
CVE-2026-25370

Missing Authorization vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Exploiting Incorrectly Configured Access Control Securit…

Mitigation only
Fix from $1,600 2026-02-19
Unclassified MEDIUM 6.5
CVE-2026-25372

Missing Authorization vulnerability in Kodezen LLC Academy LMS academy allows Exploiting Incorrectly Configured Access Control Security Levels.This i…

Mitigation only
Fix from $1,600 2026-02-19
Unclassified MEDIUM 5.3
CVE-2026-25374

Missing Authorization vulnerability in raratheme Spa and Salon spa-and-salon allows Exploiting Incorrectly Configured Access Control Security Levels.…

No fix yet
Fix from $1,600 2026-02-19
Unclassified MEDIUM 5.3
CVE-2026-25333

Missing Authorization vulnerability in peregrinethemes Shopwell shopwell allows Exploiting Incorrectly Configured Access Control Security Levels.This…

Mitigation only
Fix from $1,600 2026-02-19