CVE-2022-3632

The OAuth Client by DigitialPixies WordPress plugin through 1.1.0 does not have CSRF checks in some places, which could allow attackers to make logged-in users perform unwanted actions.

Score

CVSS 3.1 6.5 Medium

Status

Modified - contact@wpscan.com

Published

2022-11-14

Last modified

2025-04-30

Weaknesses

CWE-352

Affected products

• Oauth Client (Digitialpixies)
• Oauth Client By Digitialpixies (Unknown)

References

• https://wpscan.com/vulnerability/4c1b0e5e-245a-4d1f-a561-e91af906e62d