Wp-Oauth

3 CVEs in 1 Wp-Oauth product, including Wp Oauth Server. Newest: CVE-2024-31253 (2024-04-10). Severity, EPSS and public exploits for each.

Wp-Oauth products with known CVEs

ProductCVEs
Wp Oauth Server3
Wp-Oauth CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-31253Medium4.72024-04-10URL Redirection to Untrusted Site ('Open Redirect') vulnerability in WP OAuth Server OAuth Server.This issue affects OAuth Server: from n/a through 4.3.3.
CVE-2022-3926Medium6.52022-12-05The WP OAuth Server (OAuth Authentication) WordPress plugin before 3.4.2 does not have CSRF check when regenerating secrets, which could allow attackers to mak…
CVE-2022-3892Medium4.82022-12-05The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.2.2 does not sanitize and escape Client IDs, which could allow high privilege users such a…