CVE-2015-9435

Mô tả

Tham khảo

• security.dxw.com/advisories/the-oauth2-complete-plugin-for-wordpress-uses-a-pseudorandom-number-generator-which-is-non-cryptographically-secure · Third Party Advisory
• wordpress.org/plugins/oauth2-provider · Product

Lỗ hổng khác của oauth server

• CVE-2022-4148TRUNG BÌNH 4.3The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.3.0 has a flawed CSRF and authorisation check when deleting a client, w…
• CVE-2022-3894TRUNG BÌNH 4.3The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.2.5 does not have CSRF check when deleting a client, and does not ensur…