CVE-2024-31253

概要

参考情報

• patchstack.com/database/vulnerability/oauth2-provider/wordpress-wp-oauth-server-oauth-authentication-plugin-4-3-3-open-redirection-vulnerability · Third Party Advisory

wp oauth server のその他の脆弱性

• CVE-2022-3926中 6.5The WP OAuth Server (OAuth Authentication) WordPress plugin before 3.4.2 does not have CSRF check when regenerating secrets, which could all…
• CVE-2022-3892中 4.8The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.2.2 does not sanitize and escape Client IDs, which could allow high pri…