WordPress Oauth Server Vulnerabilities

Wordpress Oauth Server vulnerabilities.

10 April 2024

URL Redirection to Untrusted Site ('Open Redirect') vulnerability
CVE-2024-31253
WordPressOauth Server6.1MEDIUM

20 March 2023

WP OAuth Server < 4.3.0 - Subscriber+ Arbitrary Client Deletion
CVE-2022-4148
WordpressWP Oauth Server (oauth...👾🟡4.3MEDIUM
WP OAuth Server < 4.2.5 - Arbitrary Post Deletion via CSRF
CVE-2022-3894
WordpressWP Oauth Server (oauth...👾🟡4.3MEDIUM

5 December 2022

WP OAuth Server < 3.4.2 - Client Secret Regeneration via CSRF
CVE-2022-3926
WordpressWP Oauth Server (oauth...6.5MEDIUM
WP OAuth Server < 4.2.2 - Admin+ Stored XSS
CVE-2022-3892
WordpressWP Oauth Server (oauth...4.8MEDIUM

22 August 2022

WordPress WP OAuth Server plugin <= 3.0.4 - Authentication Bypass vulnerability
CVE-2022-34149
WordPressWP Oauth Server (WordP...9.8CRITICAL

26 September 2019

Insufficient Random Number Generation in oauth2-provider Plugin for WordPress
CVE-2015-9435
WordpressOauth Server9.8CRITICAL

No more vulnerabilities to load.