Read the docs

Digitialpixies

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Digitialpixies records in CISA KEV

No Digitialpixies vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Oauth Client 2 records MEDIUM

Records

2 records

TI-2022-03342 CVE-2022-3632 · GHSA-44q8-q54p-39fv

OAuth Client by DigitialPixies <= 1.1.0 - CSRF

Priority MEDIUM 62

The OAuth Client by DigitialPixies WordPress plugin through 1.1.0 does not have CSRF checks in some places, which could allow attackers to make logged-in users perform unwanted actions.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00373 Published 2022-11-14 No fix listed CWE-352
TI-2022-03341 CVE-2022-3631 · GHSA-9h87-xh4m-v7fp

OAuth Client by DigitialPixies <= 1.1.0 - Admin+ Stored Cross-Site Scripting

Priority MEDIUM 55

The OAuth Client by DigitialPixies WordPress plugin through 1.1.0 does not sanitize and escapes some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks ev…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00549 Published 2022-11-14 No fix listed CWE-79
Open these records in search →