Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-862 (授权机制缺失) — Vulnerability Class 5531

5531 vulnerabilities classified as CWE-862 (授权机制缺失). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2025-39376 WordPress Car Park Booking System for WordPress plugin <= 2.6 - Broken Access Control vulnerability — Car Park Booking System for WordPress 4.3 Medium2025-05-19
CVE-2025-39373 WordPress JNews Theme <= 11.6.16 - Broken Access Control Vulnerability — JNews 5.3 Medium2025-05-19
CVE-2025-39368 WordPress Rootspersona plugin <= 3.7.5 - Broken Access Control vulnerability — Rootspersona 5.3 Medium2025-05-19
CVE-2025-39353 WordPress Grand Restaurant WordPress theme <= 7.0 - Broken Access Control vulnerability — Grand Restaurant 5.3 Medium2025-05-19
CVE-2025-48346 WordPress Embed and Integrate Etsy Shop plugin <= 1.0.8 - Broken Access Control vulnerability — Embed and Integrate Etsy Shop 5.3 Medium2025-05-19
CVE-2025-48282 WordPress Majestic Support plugin <= 1.1.0 - Broken Access Control Vulnerability — Majestic Support 5.3 Medium2025-05-19
CVE-2025-48272 WordPress WP Job Portal plugin <= 2.3.2 - Insecure Direct Object References (IDOR) Vulnerability — WP Job Portal 5.3 Medium2025-05-19
CVE-2025-48268 WordPress Bot for Telegram on WooCommerce plugin <= 1.2.6 - Broken Access Control Vulnerability — Bot for Telegram on WooCommerce 4.3 Medium2025-05-19
CVE-2025-48262 WordPress Url Rewrite Analyzer plugin <= 1.3.3 - Broken Access Control Vulnerability — Url Rewrite Analyzer 4.3 Medium2025-05-19
CVE-2025-48260 WordPress GDPR CCPA Compliance Support plugin <= 2.7.3 - Broken Access Control Vulnerability — GDPR CCPA Compliance Support 4.3 Medium2025-05-19
CVE-2025-48257 WordPress Projectopia plugin <= 5.1.17 - Broken Access Control Vulnerability — Projectopia 6.5 Medium2025-05-19
CVE-2025-48247 WordPress Shortlinks by Pretty Links plugin <= 3.6.15 - Broken Access Control Vulnerability — Shortlinks by Pretty Links 4.3 Medium2025-05-19
CVE-2025-48246 WordPress The Events Calendar plugin <= 6.11.2.1 - Broken Access Control Vulnerability — The Events Calendar 5.4 Medium2025-05-19
CVE-2025-48242 WordPress Legal Pages plugin <= 1.4.5 - Broken Access Control Vulnerability — Legal Pages 6.5 Medium2025-05-19
CVE-2025-4477 TeamT5 ThreatSonar Anti-Ransomware - Privilege Escalation — ThreatSonar Anti-Ransomware 7.2 High2025-05-19
CVE-2025-3527 EventON - WordPress Virtual Event Calendar Plugin <= 4.9.6 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting — EventON (Pro) - WordPress Virtual Event Calendar Plugin 6.4 Medium2025-05-17
CVE-2025-31063 WordPress Wishlist plugin <= 2.1.0 - Broken Access Control Vulnerability — Wishlist 4.3 Medium2025-05-16
CVE-2025-31066 WordPress Acerola theme <= 1.6.5 - Broken Access Control Vulnerability — Acerola 5.3 Medium2025-05-16
CVE-2025-31065 WordPress Rozario <= 1.4 - Broken Access Control Vulnerability — Rozario 5.3 Medium2025-05-16
CVE-2025-31071 WordPress HotStar – Multi-Purpose Business Theme <= 1.4 - Broken Access Control Vulnerability — HotStar – Multi-Purpose Business Theme 5.3 Medium2025-05-16
CVE-2025-31630 WordPress The Business <= 1.6.1 - Broken Access Control Vulnerability — The Business 5.3 Medium2025-05-16
CVE-2025-31923 WordPress CSS3 Accordions for WordPress plugin <= 3.0 - Broken Access Control Vulnerability — CSS3 Accordions for WordPress 5.4 Medium2025-05-16
CVE-2025-32296 WordPress Simple Link Directory Pro plugin < 14.8.1 - Broken Access Control Vulnerability — Simple Link Directory 5.3 Medium2025-05-16
CVE-2025-32295 WordPress Salon Booking Wordpress plugin <= 10.10.2 - Broken Access Control vulnerability — Salon Booking Pro 4.3 Medium2025-05-16
CVE-2025-39482 WordPress Eventer plugin < 3.11.4 - Broken Access Control vulnerability — Eventer 4.3 Medium2025-05-16
CVE-2025-39493 WordPress Rankie plugin < 1.8.2 - Broken Access Control Vulnerability — Rankie 4.3 Medium2025-05-16
CVE-2025-39511 WordPress Pinterest Automatic Pin plugin <= 4.19.0 - Broken Access Control Vulnerability — Pinterest Automatic Pin 4.3 Medium2025-05-16
CVE-2025-47534 WordPress Wordpress Auto Spinner plugin <= 3.25.0 - Broken Access Control Vulnerability — Wordpress Auto Spinner 4.3 Medium2025-05-16
CVE-2025-47556 WordPress CSS3 Compare Pricing Tables for WordPress plugin <= 11.6 - Broken Access Control Vulnerability — CSS3 Compare Pricing Tables for WordPress 5.4 Medium2025-05-16
CVE-2025-47560 WordPress MapSVG plugin < 8.6.13 - Broken Access Control Vulnerability — MapSVG 5.0 Medium2025-05-16

Vulnerabilities classified as CWE-862 (授权机制缺失) represent 5531 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.