Approved changes feed: RSS · Atom

cpe:2.3:a:dash10:oauth_server:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorDash10 (99d8289d-7923-5f03-8f93-9f8eb30dd756)
ProductOauth Server (07ae81c7-b86c-5cd8-ab88-a033d446d030)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-4148 vulnerable 2026-06-08 05:51:36.902935 WP OAuth Server < 4.3.0 - Subscriber+ Arbitrary Client Deletion
The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.3.0 has a flawed CSRF and authorisation check when deleting a client, which could allow any authenticated users, such as subscriber to delete arbitrary client.
Published: 2023-03-20T15:52:20.188Z
Updated: 2025-02-26T18:59:29.135Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3894 vulnerable 2026-06-08 05:48:22.561665 WP OAuth Server < 4.2.5 - Arbitrary Post Deletion via CSRF
The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.2.5 does not have CSRF check when deleting a client, and does not ensure that the object to be deleted is actually a client, which could allow attackers to make a logged in admin delete arbitrary client and post via a CSRF attack.
Published: 2023-03-20T15:52:07.429Z
Updated: 2025-02-26T19:07:21.381Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-9435 vulnerable 2026-06-08 05:07:13.710260 Details available
The oauth2-provider plugin before 3.1.5 for WordPress has incorrect generation of random numbers.
Published: 2019-09-26T01:14:07.000Z
Updated: 2024-08-06T08:51:04.430Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.