CVE-2025-6238

The AI Engine plugin for WordPress is vulnerable to open redirect in version 2.8.4. This is due to an insecure OAuth implementation, as the 'redirecturi' parameter is missing validation during the authorization flow. This makes it possible for unauthenticated attackers to intercept the...

CVE-2025-6238

The CVE-2025-6238 case concerns the WordPress AI Engine plugin (v2.8.4) with an insecure OAuth implementation where the redirect_uri parameter lacks validation during the authorization flow. This open redirect could allow unauthenticated attackers to intercept the authorization code and obtain an...

8x8: Insecure OAuth redirection at [admin.8x8.vc]

The meetings admin application performed an insufficient validation of the specified redirect location during OAuth negotiation. There was an improper redirection in "admin.8x8.vc" oauth that lead to takeover the admin.8x8.vc SSO accounts , When trying to adding an admin account in admin.8x8.vc...