Wp Oauth Server Oauth Authentication (Unknown) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-03-20. Vendor: Unknown.

CVEs of Wp Oauth Server Oauth Authentication

• CVE-2022-4148 - CVSS 4.3 (medium), 2023-03-20: The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.3.0 has a flawed CSRF and authorisation check when deleting a client, which could allow…
• CVE-2022-3894 - CVSS 4.3 (medium), 2023-03-20: The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.2.5 does not have CSRF check when deleting a client, and does not ensure that the object…
• CVE-2022-3926 - CVSS 6.5 (medium), 2022-12-05: The WP OAuth Server (OAuth Authentication) WordPress plugin before 3.4.2 does not have CSRF check when regenerating secrets, which could allow attackers to…
• CVE-2022-3892 - CVSS 4.8 (medium), 2022-12-05: The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.2.2 does not sanitize and escape Client IDs, which could allow high privilege users such…