auth0

Records58All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical11CVSS 9.0–10.0

CVSS high24CVSS 7.0–8.9

Exploited now

auth0 records in CISA KEV

No auth0 vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Login By Auth0 · all components

TI-2020-06427 CVE-2020-7947 · GHSA-qg37-qxcf-8f6f

MEDIUM 47

An issue was discovered in the Login by Auth0 plugin before 4.0.0 for WordPress.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02842 Published 2020-04-01 No fix listed CWE-1236

TI-2020-06428 CVE-2020-7948 · GHSA-v6r7-2vvw-26cw

MEDIUM 42

An issue was discovered in the Login by Auth0 plugin before 4.0.0 for WordPress.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02191 Published 2020-04-01 No fix listed

TI-2019-14548 CVE-2019-20173

LOW 32

The Auth0 wp-auth0 plugin 3.11.x before 3.11.3 for WordPress allows XSS via a wle parameter associated with wp-login.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02462 Published 2020-02-05 No fix listed CWE-79

TI-2020-05478 CVE-2020-6753 · GHSA-3w4w-m332-9cfq

LOW 30

The Login by Auth0 plugin before 4.0.0 for WordPress allows stored XSS on multiple pages, a different issue than CVE-2020-5392.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01318 Published 2020-04-01 No fix listed CWE-79