Lucene search

WordPress OAuth Server Plugin < 4.3.0 is vulnerable to Broken Access Control

🗓️ 02 Mar 2023 00:00:00Reported by Lana CodesType

WordPress OAuth Server Plugin < 4.3.0 vulnerable to Broken Access Contro

Reporter	Title	Published	Views	Family All 6
Prion	Cross site request forgery (csrf)	20 Mar 202316:15	–	prion
NVD	CVE-2022-4148	20 Mar 202316:15	–	nvd
wpexploit	WP OAuth Server < 4.3.0 - Subscriber+ Arbitrary Client Deletion	21 Feb 202300:00	–	wpexploit
Cvelist	CVE-2022-4148 WP OAuth Server < 4.3.0 - Subscriber+ Arbitrary Client Deletion	20 Mar 202315:52	–	cvelist
WPVulnDB	WP OAuth Server < 4.3.0 - Subscriber+ Arbitrary Client Deletion	21 Feb 202300:00	–	wpvulndb
CVE	CVE-2022-4148	20 Mar 202316:15	–	cve

Vulners

Node

wp_oauth_server oauth_serverRange<4.3.0

Source	Link
wordpress	www.wordpress.org/plugins/oauth2-provider/
cve	www.cve.org/CVERecord
lana	www.lana.codes/
wpscan	www.wpscan.com/vulnerability/be9b25c8-b0d7-4c22-81ff-e41650a4ed41
wordfence	www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/oauth2-provider/wp-oauth-server-425-authenticated-subscriber-arbitrary-client-deletion-wo-ajax-remove-client

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

02 Mar 2023 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS34.3