Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-64028
HistoryJul 26, 2022 - 12:00 a.m.

WordPress WP OAuth2 Server Access Control Error Vulnerability

2022-07-2600:00:00
China National Vulnerability Database
www.cnvd.org.cn
2
wordpress
php
mysql
access control
vulnerability
authentication bypass

0.002 Low

EPSS

Percentile

59.6%

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. An access control error vulnerability exists in WordPress WP OAuth2 Server 1.0.1 and prior versions, which stems from an improper access control error in the application and can be exploited by an attacker to cause authentication bypass.

CPENameOperatorVersion
wordpress wp oauth2 serverle1.0.1

0.002 Low

EPSS

Percentile

59.6%