CVE-2015-9435

概要

参考情報

• security.dxw.com/advisories/the-oauth2-complete-plugin-for-wordpress-uses-a-pseudorandom-number-generator-which-is-non-cryptographically-secure · Third Party Advisory
• wordpress.org/plugins/oauth2-provider · Product

oauth server のその他の脆弱性

• CVE-2022-4148中 4.3The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.3.0 has a flawed CSRF and authorisation check when deleting a client, w…
• CVE-2022-3894中 4.3The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.2.5 does not have CSRF check when deleting a client, and does not ensur…