Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
Wp-oauthWp Oauth Server

3 matches found

CVE
CVE•added 2024/04/10 3:27 p.m.•91 views

CVE-2024-31253

CVE-2024-31253 describes an Open Redirect vulnerability in the WP OAuth Server (OAuth Server) plugin. According to the provided sources, the issue affects OAuth Server up to version 4.3.3 and can redirect users to an untrusted site. The Red Hat and Wordfence entries corroborate the same descripti...

6.1CVSS8.5AI score0.00376EPSS
CVE
CVE•added 2022/12/05 4:50 p.m.•55 views

CVE-2022-3892

CVE-2022-3892 affects the WordPress plugin “WP OAuth Server (OAuth Authentication)”

4.8CVSS4.7AI score0.00485EPSS
CVE
CVE•added 2022/12/05 4:50 p.m.•50 views

CVE-2022-3926

The CVE-2022-3926 issue affects the WP OAuth Server (OAuth Authentication) WordPress plugin, versions prior to 3.4.2. The root cause is a missing CSRF check when regenerating secrets, which could let an attacker who is logged in and knows a client ID trigger a secret regeneration for any client. ...

6.5CVSS6.5AI score0.00326EPSS
Web