Lucene search
Lana CodesPATCHSTACK:58CF158DD11AC29E8D3825E93B5E2F55HistoryNov 15, 2022 - 12:00 a.m.
WordPress OAuth Client by DigitialPixies plugin <= 1.1.0 - Cross-Site Request Forgery (CSRF) vulnerability
2022-11-1500:00:00
Lana Codes
patchstack.com
6
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Cross-Site Request Forgery (CSRF) vulnerability discovered by Lana Codes in WordPress OAuth Client by DigitialPixies plugin (versions <= 1.1.0)
Solution
No patched version is available. This plugin has been closed as of October 21, 2022 and is not available for download. This closure is temporary, pending a full review.
| CPE | Name | Operator | Version |
|---|---|---|---|
| oauth client by digitialpixies | le | 1.1.0 |
Related
cvelist
cvelist
OAuth Client by DigitialPixies <= 1.1.0 - CSRF
2022-11-14 00:00:00
wpexploit
wpexploit
OAuth Client by DigitialPixies <= 1.1.0 - CSRF
2022-10-21 00:00:00
wpvulndb
wpvulndb
OAuth Client by DigitialPixies <= 1.1.0 - CSRF
2022-10-21 00:00:00
prion
prion
Cross site request forgery (csrf)
2022-11-14 15:15:00
cve
cve
CVE-2022-3632
2022-11-14 15:15:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Related for PATCHSTACK:58CF158DD11AC29E8D3825E93B5E2F55