Lucene search
Philip ÅkessonWPVDB-ID:C0433E94-3BCC-438A-9369-2607AEC8B067HistoryOct 02, 2020 - 12:00 a.m.
WordPress + Microsoft Office 365 < 11.7 - JWT Signature Verification Bypass
2020-10-0200:00:00
Philip Åkesson
wpscan.com
11
0.001 Low
EPSS
Percentile
49.7%
The plugin does not correctly verify JWT signatures, allowing attackers to forge tokens and bypass authentication and authorisation checks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wpo365-login | lt | 11.7 |
References
Related
cvelist
cvelist
CVE-2020-26511
2020-10-02 04:04:01
patchstack
patchstack
cve
cve
CVE-2020-26511
2020-10-02 05:15:12
prion
prion
Authentication flaw
2020-10-02 05:15:00
nvd
nvd
CVE-2020-26511
2020-10-02 05:15:12