CVE-2020-7948

Mô tả

Tham khảo

• auth0.com/docs/cms/wordpress · Product
• auth0.com/docs/security/bulletins/2020-03-31_wpauth0 · Vendor Advisory
• auth0/wp-auth0 security advisory · Third Party Advisory
• wordpress.org/plugins/auth0 · Release Notes

Lỗ hổng khác của login by auth0

• CVE-2020-7947NGHIÊM TRỌNG 9.8An issue was discovered in the Login by Auth0 plugin before 4.0.0 for WordPress. It has numerous fields that can contain data that is pulled…
• CVE-2020-6753TRUNG BÌNH 6.1The Login by Auth0 plugin before 4.0.0 for WordPress allows stored XSS on multiple pages, a different issue than CVE-2020-5392.
• CVE-2019-20173TRUNG BÌNH 6.1The Auth0 wp-auth0 plugin 3.11.x before 3.11.3 for WordPress allows XSS via a wle parameter associated with wp-login.php.