Design/Logic Flaw

2019-09-2602:15:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.7%

The oauth2-provider plugin before 3.1.5 for WordPress has incorrect generation of random numbers.

CPENameOperatorVersion
oauth_serverlt3.1.5

CPE	Name	Operator	Version
	oauth_server	lt	3.1.5

References

security.dxw.com/advisories/the-oauth2-complete-plugin-for-wordpress-uses-a-pseudorandom-number-generator-which-is-non-cryptographically-secure/

wordpress.org/plugins/oauth2-provider/