Monitor free

Report

New Known

Verified

Not fixed

WordPress WP OAuth2 Server plugin <= 1.0.1 - Authentication Bypass vulnerability

5.9

CVSS 3.1 score Medium severity

Report

Monitoring Not reported to be exploited

Find out about vulnerable plugins in your websites for free.

Scan your website

Software

WP OAuth2 Server

Type

Plugin

Vulnerable versions

<= 1.0.1

Fixed in

N/A

PSID

3b498c1a6d62

CVE ID

CVE-2022-34839

Classification

Bypass Vulnerability

OWASP Top 10

A2: Broken Authentication

Required privilege

Can be exploited remotely without any authentication.

Credits

Lana Codes

Publicly disclosed

2022-07-18

Patchstack vPatch available since

09.12.2021

Details

Authentication Bypass vulnerability discovered by Lana Codes in WordPress WP OAuth2 Server plugin (versions <= 1.0.1).

Solution

Deactivate and delete. This plugin has been closed as of June 23, 2022 and is not available for download. This closure is temporary, pending a full review.

References