Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-862 (授权机制缺失) — Vulnerability Class 5531

5531 vulnerabilities classified as CWE-862 (授权机制缺失). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2025-58976 WordPress Accessibility Checker by Equalize Digital Plugin <= 1.31.0 - Broken Access Control Vulnerability — Accessibility Checker by Equalize Digital 4.3 Medium2025-09-09
CVE-2025-58978 WordPress PDF Generator for WordPress Plugin <= 1.5.4 - Broken Access Control Vulnerability — PDF Generator for WordPress 5.3 Medium2025-09-09
CVE-2025-58979 WordPress BerqWP Plugin <= 2.2.53 - Broken Access Control Vulnerability — BerqWP 5.3 Medium2025-09-09
CVE-2025-58980 WordPress Export WP Page to Static HTML/CSS Plugin <= 4.1.0 - Broken Access Control Vulnerability — Export WP Page to Static HTML/CSS 5.3 Medium2025-09-09
CVE-2025-58981 WordPress Accessibility Checker by Equalize Digital Plugin <= 1.31.0 - Broken Access Control Vulnerability — Accessibility Checker by Equalize Digital 5.4 Medium2025-09-09
CVE-2025-53291 WordPress Spreadconnect plugin <= 2.1.5 - Broken Access Control Vulnerability — Spreadconnect 5.4 Medium2025-09-09
CVE-2025-53340 WordPress Awesome Support plugin <= 6.3.6 - Sensitive Data Exposure vulnerability — Awesome Support 5.3 Medium2025-09-09
CVE-2025-53348 WordPress Kalium Theme <= 3.18.3 - Broken Access Control Vulnerability — Kalium 5.3 Medium2025-09-09
CVE-2025-32688 WordPress Target Video Easy Publish plugin <= 3.8.9 - Arbitrary Code Execution vulnerability — Target Video Easy Publish 5.4 Medium2025-09-09
CVE-2025-39541 WordPress WP Simple Booking Calendar plugin <= 2.0.13 - Broken Access Control vulnerability — WP Simple Booking Calendar 6.5 Medium2025-09-09
CVE-2025-39553 WordPress Church Admin plugin <= 5.0.9 - Sensitive Data Exposure vulnerability — Church Admin 4.3 Medium2025-09-09
CVE-2025-49860 WordPress Majestic Support plugin <= 1.1.0 - Broken Access Control vulnerability — Majestic Support 5.3 Medium2025-09-09
CVE-2025-59005 WordPress Categorify plugin <= 1.0.7.5 - Broken Access Control vulnerability — Categorify 4.3 Medium2025-09-09
CVE-2025-55144 Ivanti多款产品 安全漏洞 — Connect Secure 5.4 Medium2025-09-09
CVE-2025-55142 Ivanti多款产品 安全漏洞 — Connect Secure 8.8 High2025-09-09
CVE-2025-55141 Ivanti多款产品 安全漏洞 — Connect Secure 8.8 High2025-09-09
CVE-2025-55148 Ivanti多款产品 安全漏洞 — Connect Secure 7.6 High2025-09-09
CVE-2025-55145 Ivanti多款产品 安全漏洞 — Connect Secure 22.7R2.9 8.9 High2025-09-09
CVE-2025-8712 Ivanti多款产品 安全漏洞 — Connect Secure before 5.4 Medium2025-09-09
CVE-2025-59017 Broken Access Control in Backend AJAX Routes — TYPO3 CMS 8.8AIHighAI2025-09-09
CVE-2025-9542 AutomatorWP <= 5.3.7 - Authenticated (Subscriber+) Missing Authorization to Multiple Functions — AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress 5.4 Medium2025-09-09
CVE-2025-42918 Missing Authorization check in SAP NetWeaver Application Server for ABAP (Background Processing) — SAP NetWeaver Application Server for ABAP (Background Processing) 4.3 Medium2025-09-09
CVE-2025-42917 Missing Authorization check in SAP HCM (Approve Timesheets Fiori 2.0 application) — SAP HCM (Approve Timesheets Fiori 2.0 application) 6.5 Medium2025-09-09
CVE-2025-42915 Missing Authorization Check in Fiori app (Manage Payment Blocks) — Fiori app (Manage Payment Blocks) 5.4 Medium2025-09-09
CVE-2025-42914 Missing Authorization check in SAP HCM (My Timesheet Fiori 2.0 application) — SAP HCM (My Timesheet Fiori 2.0 application) 3.1 Low2025-09-09
CVE-2025-42913 Missing Authorization check in SAP HCM (My Timesheet Fiori 2.0 application) — SAP HCM (My Timesheet Fiori 2.0 application) 3.1 Low2025-09-09
CVE-2025-42912 Missing Authorization check in SAP HCM (My Timesheet Fiori 2.0 application) — SAP HCM (My Timesheet Fiori 2.0 application) 6.5 Medium2025-09-09
CVE-2025-42911 Missing Authorization check in SAP NetWeaver (Service Data Download) — SAP NetWeaver (Service Data Download) 5.0 Medium2025-09-09
CVE-2025-57817 Fides Webserver API is Vulnerable to OAuth Client Privilege Escalation — fides 7.2AIHighAI2025-09-08
CVE-2024-36326 AMD Client Processor 安全漏洞 — AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics 8.4 High2025-09-06

Vulnerabilities classified as CWE-862 (授权机制缺失) represent 5531 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.