Wp-Oauth

3 CVEs across 1 Wp-Oauth products. Browse Wp-Oauth vulnerabilities, severities, and proof-of-concept exploits.

Wp-Oauth products with known CVEs

ProductCVEs
Wp Oauth Server3
Wp-Oauth CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-31253Medium4.72024-04-10URL Redirection to Untrusted Site ('Open Redirect') vulnerability in WP OAuth Server OAuth Server.This issue affects OAuth Server: from n/a through 4.3.3.
CVE-2022-3926Medium6.52022-12-05The WP OAuth Server (OAuth Authentication) WordPress plugin before 3.4.2 does not have CSRF check when regenerating secrets, which could allow attackers to mak…
CVE-2022-3892Medium4.82022-12-05The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.2.2 does not sanitize and escape Client IDs, which could allow high privilege users such a…