Lucene search
+L

7 matches found

NVD
NVD
•added 2026/07/15 6:16 p.m.•38 views

CVE-2026-53516

Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, Better Auth's OAuth callback auto-link gate in handleOAuthUserInfo accepts implicit account linking when the OAuth provider asserts emailverified: true without requiring the local user row's emailVerified...

8.3CVSS0.00289EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/07/15 5:13 p.m.•49 views

CVE-2026-53516 Better Auth: Account takeover via OAuth auto-link to unverified pre-registered email

Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, Better Auth's OAuth callback auto-link gate in handleOAuthUserInfo accepts implicit account linking when the OAuth provider asserts emailverified: true without requiring the local user row's emailVerified...

8.3CVSS0.00289EPSS
SaveExploits0References4
CVE
CVE
•added 2026/07/15 5:13 p.m.•66 views

CVE-2026-53516

Summary: CVE-2026-53516 affects Better Auth (

8.3CVSS5.9AI score0.00289EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
•added 2025/05/02 12:00 a.m.•62 views

WordPress plugin OTP-less one tap Sign in 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in the WordPress plugin OTP-less one ta...

9.8CVSS8.8AI score0.00548EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/02 12:00 a.m.•4 views

CVE-2025-3746: Missing Authorization

The OTP-less one tap Sign in plugin for WordPress is vulnerable to privilege escalation via account takeover in versions 2.0.14 to 2.0.59. This is due to the plugin not properly validating a user's identity prior to updating their details, like email. This makes it possible for unauthenticated...

9.8CVSS8.2AI score0.00548EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/17 12:00 a.m.•3 views

CVE-2025-32622: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OTP-less OTP-less one tap Sign in otpless allows Reflected XSS.This issue affects OTP-less one tap Sign in: from n/a through = 2.0.58...

7.1CVSS5.8AI score0.00288EPSS
SaveExploits0References1
hackapp
hackapp
•added 2016/04/01 9:19 a.m.•18 views

Perfect365: One-Tap Makeover - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Perfect365: One-Tap Makeover published at the 'play' market has multiple vulnerabilities...

0.3AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder