Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-862 (授权机制缺失) — Vulnerability Class 5531

5531 vulnerabilities classified as CWE-862 (授权机制缺失). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2025-66161 WordPress Grider for Elementor plugin <= 1.0.8 - Broken Access Control vulnerability — Grider for Elementor 5.4 Medium2025-12-16
CVE-2025-66134 WordPress FileBird Pro plugin <= 6.5.1 - Broken Access Control vulnerability — FileBird Pro 5.4 Medium2025-12-16
CVE-2025-66133 WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.0.7 - Broken Access Control vulnerability — WP Cookie Notice for GDPR, CCPA & ePrivacy Consent 5.3 Medium2025-12-16
CVE-2025-66131 WordPress Yaad Sarig Payment Gateway For WC plugin <= 2.2.11 - Broken Access Control vulnerability — Yaad Sarig Payment Gateway For WC 5.3 Medium2025-12-16
CVE-2025-66127 WordPress Essential Real Estate plugin <= 5.3.2 - Broken Access Control vulnerability — Essential Real Estate 5.3 Medium2025-12-16
CVE-2025-66129 WordPress Pochipp plugin <= 1.18.0 - Broken Access Control vulnerability — Pochipp 5.3 Medium2025-12-16
CVE-2025-66128 WordPress Sendinblue for WooCommerce plugin <= 4.0.49 - Broken Access Control vulnerability — Sendinblue for WooCommerce 5.3 Medium2025-12-16
CVE-2025-66130 WordPress WP Views Counter plugin <= 2.1.2 - Broken Access Control vulnerability — WP Views Counter 5.3 Medium2025-12-16
CVE-2025-66121 WordPress SiteGround Security plugin <= 1.5.8 - Broken Access Control vulnerability — SiteGround Security 5.3 Medium2025-12-16
CVE-2025-66124 WordPress Leaky Paywall plugin <= 4.22.6 - Broken Access Control vulnerability — Leaky Paywall 5.3 Medium2025-12-16
CVE-2025-66122 WordPress Stylish Price List plugin <= 7.2.2 - Broken Access Control vulnerability — Stylish Price List 5.3 Medium2025-12-16
CVE-2025-66120 WordPress CatFolders plugin <= 2.5.3 - Broken Access Control vulnerability — CatFolders 5.3 Medium2025-12-16
CVE-2025-64635 WordPress Feeds for YouTube plugin <= 2.4.0 - Broken Access Control vulnerability — Feeds for YouTube 5.3 Medium2025-12-16
CVE-2025-64639 WordPress WP Compress for MainWP plugin <= 6.50.17 - Broken Access Control vulnerability — WP Compress for MainWP 5.3 Medium2025-12-16
CVE-2025-64638 WordPress OnPay.io for WooCommerce plugin <= 1.0.47 - Broken Access Control vulnerability — OnPay.io for WooCommerce 5.3 Medium2025-12-16
CVE-2025-64632 WordPress Google XML Sitemaps plugin <= 4.1.22 - Broken Access Control vulnerability — Google XML Sitemaps 5.3 Medium2025-12-16
CVE-2025-64634 WordPress Avada theme <= 7.13.2 - Broken Access Control vulnerability — Avada 5.3 Medium2025-12-16
CVE-2025-64631 WordPress WCFM Marketplace plugin <= 3.7.1 - Broken Access Control vulnerability — WCFM Marketplace 4.9 Medium2025-12-16
CVE-2025-64251 WordPress Ultimate Learning Pro plugin <= 3.9.3 - Arbitrary Content Deletion vulnerability — Ultimate Learning Pro 4.9 Medium2025-12-16
CVE-2025-64630 WordPress Business Directory plugin <= 6.4.19 - Broken Access Control vulnerability — Business Directory 4.9 Medium2025-12-16
CVE-2025-64249 WordPress Protect WP Admin plugin <= 4.1 - Broken Access Control vulnerability — Protect WP Admin 4.3 Medium2025-12-16
CVE-2025-64244 WordPress Restrict Elementor Widgets, Columns and Sections plugin <= 1.12 - Broken Access Control vulnerability — Restrict Elementor Widgets, Columns and Sections 4.3 Medium2025-12-16
CVE-2025-64247 WordPress Read More & Accordion plugin <= 3.5.5.1 - Broken Access Control vulnerability — Read More & Accordion 4.3 Medium2025-12-16
CVE-2025-64248 WordPress Request a Quote plugin <= 2.5.3 - Broken Access Control vulnerability — Request a Quote 4.3 Medium2025-12-16
CVE-2025-64246 WordPress Accessibility by AudioEye plugin <= 1.0.49 - Broken Access Control vulnerability — Accessibility by AudioEye 4.3 Medium2025-12-16
CVE-2025-64245 WordPress Import external attachments plugin <= 1.5.12 - Broken Access Control vulnerability — Import external attachments 4.3 Medium2025-12-16
CVE-2025-64242 WordPress Easy Property Listings plugin <= 3.5.22 - Broken Access Control vulnerability — Easy Property Listings 4.3 Medium2025-12-16
CVE-2025-64243 WordPress Directory Pro plugin <= 2.5.6 - Broken Access Control vulnerability — Directory Pro 4.3 Medium2025-12-16
CVE-2025-64241 WordPress WP Coupons and Deals plugin <= 3.2.4 - Broken Access Control vulnerability — WP Coupons and Deals 4.3 Medium2025-12-16
CVE-2025-59001 WordPress Salient Core plugin <= 3.0.8 - Broken Access Control vulnerability — Salient Core 4.3 Medium2025-12-16

Vulnerabilities classified as CWE-862 (授权机制缺失) represent 5531 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.