The Login by Auth0 plugin for WordPress <= 4.6.0 is vulnerable to Reflected Cross-Site Scripting via 'wle' parameter due to insufficient input sanitization and output escaping
Reporter | Title | Published | Views | Family All 10 |
---|---|---|---|---|
![]() | WordPress Login by Auth0 Plugin <= 4.6.0 is vulnerable to Cross Site Scripting (XSS) | 10 Jul 202400:00 | – | patchstack |
![]() | GHSA-52JW-F3JQ-HHWG Duplicate Advisory: Login by Auth0 plugin for WordPress vulnerable to Reflected Cross-Site Scripting | 10 Jul 202409:30 | – | osv |
![]() | GHSA-X6P7-44RH-M3RR Login by Auth0 plugin for WordPress vulnerable to Reflected Cross-Site Scripting | 11 Jul 202419:52 | – | osv |
![]() | CVE-2023-6813 | 10 Jul 202408:15 | – | nvd |
![]() | CVE-2023-6813 | 23 May 202502:06 | – | redhatcve |
![]() | CVE-2023-6813 Login by Auth0 <= 4.6.0 - Reflected Cross-Site Scripting via wle | 10 Jul 202407:36 | – | vulnrichment |
![]() | Cross-Site Scripting (XSS) | 12 Jul 202408:56 | – | veracode |
![]() | Login by Auth0 plugin for WordPress vulnerable to Reflected Cross-Site Scripting | 11 Jul 202419:52 | – | github |
![]() | CVE-2023-6813 | 10 Jul 202408:15 | – | cve |
![]() | Wordfence Intelligence Weekly WordPress Vulnerability Report (July 8, 2024 to July 14, 2024) | 18 Jul 202415:33 | – | wordfence |
[
{
"vendor": "auth0",
"product": "Login by Auth0",
"versions": [
{
"version": "*",
"status": "affected",
"lessThanOrEqual": "4.6.0",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
]
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo