Lucene search
PRIOn knowledge basePRION:CVE-2022-4148HistoryMar 20, 2023 - 4:15 p.m.
Cross site request forgery (csrf)
2023-03-2016:15:00
PRIOn knowledge base
www.prio-n.com
4
cross site request forgery
csrf
wp oauth server
oauth authentication
wordpress plugin
flawed security
authorisation check
client deletion
arbitrary user deletion
The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.3.0 has a flawed CSRF and authorisation check when deleting a client, which could allow any authenticated users, such as subscriber to delete arbitrary client.
| CPE | Name | Operator | Version |
|---|---|---|---|
| oauth_server | lt | 4.3.0 |
Related
cvelist
cvelist
nvd
nvd
CVE-2022-4148
2023-03-20 16:15:11
wpexploit
wpexploit
WP OAuth Server < 4.3.0 - Subscriber+ Arbitrary Client Deletion
2023-02-21 00:00:00
cve
cve
CVE-2022-4148
2023-03-20 16:15:11
wpvulndb
wpvulndb
WP OAuth Server < 4.3.0 - Subscriber+ Arbitrary Client Deletion
2023-02-21 00:00:00