CVE-2015-9435

The oauth2-provider plugin before 3.1.5 for WordPress has incorrect generation of random numbers.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-09-26

Last modified

2024-08-06

Weaknesses

CWE-338

Affected products

• Oauth Server (Dash10)

References

• https://security.dxw.com/advisories/the-oauth2-complete-plugin-for-wordpress-uses-a-pseudorandom-number-generator-which…
• https://wordpress.org/plugins/oauth2-provider/#developers