3 matches found
CVE-2020-26511
The wpo365-login plugin before v11.7 for WordPress allows use of a symmetric algorithm to decrypt a JWT token. This leads to authentication bypass...
7.5CVSS7.1AI score0.02146EPSS
SaveExploits0
CVE-2020-26511
The CVE-2020-26511 entry concerns the WordPress plugin wpo365-login prior to v11.7. The issue is that the plugin uses a symmetric algorithm to decrypt a JWT token, enabling authentication bypass. Concrete details from connected sources specify the affected product (WordPress plugin wpo365-login),...
7.5CVSS7.6AI score0.02146EPSS
SaveExploits0References4Affected Software1
20