4.3
Moyenne
CVE-2022-4148 The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.3.0 has a flawed CSRF and authorisation check…
Description
The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.3.0 has a flawed CSRF and authorisation check when deleting a client, which could allow any authenticated users, such as subscriber to delete arbitrary client.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP OAuth Server (OAuth Authentication) 4.3 | premières → < 4.3.0 | 4.3.0 |
Autres CVE de WP OAuth Server (OAuth Authentication)
Les 4 CVE de WP OAuth Server (OAuth Authentication) →
CVE-2022-3894
The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.2.5 does not have CSRF check when deleting a…
4.3
Moyenne
CVE-2022-3926
The WP OAuth Server (OAuth Authentication) WordPress plugin before 3.4.2 does not have CSRF check when regenerating…
6.5
Moyenne
CVE-2022-3892
The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.2.2 does not sanitize and escape Client IDs,…
4.8
Moyenne