WordPress security by component
Auth0
Plugin description
Auth0 is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Apr 01, 2020; the highest published CVSS base score is 9.8.
Plugin slug:
auth0Latest vulnerability
CVE-2020-7948: Auth0: Broken access control
Auth0 is affected by broken access control. Exposure depends on how the affected operation is made reachable by the site. A successful request can reach data or an operation that should be restricted to another user or a more privileged role. The public source does not disclose the vulnerable endpoint, action, parameter or function, so the precise input path remains unknown.
| Safe version |
|
||
|---|---|---|---|
| Apr 01, 2020 |
CVE-2020-7948
Auth0: Broken access control
Auth0 is affected by broken access control. Exposure depends on how the affected operation is made reachable by the site. A successful request can reach data or an operation that should be restricted to another user or a more privileged role. The public source does not disclose the vulnerable endpoint, action, parameter or function, so the precise input path remains unknown.
|
See mitigation notes |
CVEPending
NVD8.8
|
| Apr 01, 2020 |
CVE-2020-7947
Auth0: A security weakness
Auth0 is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The public source does not disclose the vulnerable endpoint, action, parameter or function, so the precise input path remains unknown.
|
See mitigation notes |
CVEPending
NVD9.8
|