Vendor/product archive

dash10 / oauth_server CVEs

Beta · best-effort

3 CVEs tagged to dash10 / oauth_server — 1 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to dash10 vendor archive

CVE-2022-4148

Published Mar 20, 2023

The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.3.0 has a flawed CSRF and authorisation check when deleting a client, which could allow any authenticated user…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-3894

Published Mar 20, 2023

The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.2.5 does not have CSRF check when deleting a client, and does not ensure that the object to be deleted is actu…

CVSS 4.3 · Medium

evidence mentions: 1
Buzz score: 11.9

Vendor/product tagsBeta · best-effort

CVE-2015-9435

Published Sep 26, 2019

The oauth2-provider plugin before 3.1.5 for WordPress has incorrect generation of random numbers.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1