Digitialpixies Oauth Client
2 CVEs affecting Digitialpixies Oauth Client. Latest disclosed: 2022-11-14. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-3632 | Medium | 6.5 | 2022-11-14 | The OAuth Client by DigitialPixies WordPress plugin through 1.1.0 does not have CSRF checks in some places, which could allow attackers to make logged-in users… |
CVE-2022-3631 | Medium | 4.8 | 2022-11-14 | The OAuth Client by DigitialPixies WordPress plugin through 1.1.0 does not sanitize and escapes some of its settings, which could allow high-privilege users su… |