Lucene search
PRIOn knowledge basePRION:CVE-2022-3894HistoryMar 20, 2023 - 4:15 p.m.
Cross site request forgery (csrf)
2023-03-2016:15:00
PRIOn knowledge base
www.prio-n.com
1
wp oauth server
csrf attack
client deletion
The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.2.5 does not have CSRF check when deleting a client, and does not ensure that the object to be deleted is actually a client, which could allow attackers to make a logged in admin delete arbitrary client and post via a CSRF attack.
| CPE | Name | Operator | Version |
|---|---|---|---|
| oauth_server | lt | 4.2.5 |
Related
wpvulndb
wpvulndb
WP OAuth Server < 4.2.5 - Arbitrary Post Deletion via CSRF
2023-02-21 00:00:00
cve
cve
CVE-2022-3894
2023-03-20 16:15:11
cvelist
cvelist
CVE-2022-3894 WP OAuth Server < 4.2.5 - Arbitrary Post Deletion via CSRF
2023-03-20 15:52:07
nvd
nvd
CVE-2022-3894
2023-03-20 16:15:11
wpexploit
wpexploit
WP OAuth Server < 4.2.5 - Arbitrary Post Deletion via CSRF
2023-02-21 00:00:00
wordfence
wordfence