CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
We have discovered 26,133 live websites that are affected by CWE-287.
CVEs
- Count - 4
CWE References
Countries
 United States | 8,248 websites |
 Germany | 2,538 websites |
 France | 1,293 websites |
 GB | 1,290 websites |
 Italy | 884 websites |
 Spain | 871 websites |
 Brazil | 845 websites |
 Canada | 780 websites |
 India | 702 websites |
 Netherlands | 683 websites |
TLDs
| .com | 8,927 websites |
| .org | 3,697 websites |
| .de | 1,800 websites |
| .com.br | 685 websites |
| .co.uk | 571 websites |
| .it | 568 websites |
| .nl | 565 websites |
| .net | 527 websites |
| .fr | 520 websites |
| .ca | 397 websites |
Newest CVEs
List of the most recent CVEs that are part of CWE-287| Discovered | CVE | Description | Websites |
|---|---|---|---|
| Feb, 2024 | CVE-2023-6036 | Web3 – Crypto wallet Login & NFT token gating < 3.0.0 - Authentication Bypass | 251 |
| Dec, 2023 | CVE-2023-6203 | The Events Calendar < 6.2.8.1 - Unauthenticated Arbitrary Password Protected Post Read | 10,820 |
| May, 2023 | CVE-2023-32243 | WordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege Escalation | 14,022 |
| May, 2023 | CVE-2023-30869 | WordPress Easy Digital Downloads Plugin 3.1-3.1.1.4.1 is vulnerable to Privilege Escalation | 1,068 |
The most widespread CVEs
List of the most common CVEs that are part of CWE-287| Discovered | CVE | Description | Websites |
|---|---|---|---|
| May, 2023 | CVE-2023-32243 | WordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege Escalation | 14,022 |
| Dec, 2023 | CVE-2023-6203 | The Events Calendar < 6.2.8.1 - Unauthenticated Arbitrary Password Protected Post Read | 10,820 |
| May, 2023 | CVE-2023-30869 | WordPress Easy Digital Downloads Plugin 3.1-3.1.1.4.1 is vulnerable to Privilege Escalation | 1,068 |
| Feb, 2024 | CVE-2023-6036 | Web3 – Crypto wallet Login & NFT token gating < 3.0.0 - Authentication Bypass | 251 |
Websites affected by CWE-287
Top websites that are affected by CWE-287. Please click on the "Contact us" link to get more information.| Domain | Country | Rank | Contacts |
|---|---|---|---|
| ****.*******.org | United States | *,*** | |
| ********.com | United States | *,*** | |
| ***.***.cz |  Czech Republic | *,*** | |
| ***.****.*******.edu | United States | *,*** | |
| ************.org | United States | *,*** | |
| **********.com | United States | *,*** | |
| *************.com | United States | *,*** | |
| **********.com | United States | **,*** | |
| ************.com | United States | **,*** | |
| *****************.com | United States | **,*** |