Vulnerabilities

TI-2020-06428 CVE-2020-7948 · GHSA-v6r7-2vvw-26cw

An issue was discovered in the Login by Auth0 plugin before 4.0.0 for WordPress.

MEDIUM 42

An issue was discovered in the Login by Auth0 plugin before 4.0.0 for WordPress.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02191 Published 2020-04-01 No fix listed

TI-2020-06427 CVE-2020-7947 · GHSA-qg37-qxcf-8f6f

MEDIUM 47

An issue was discovered in the Login by Auth0 plugin before 4.0.0 for WordPress.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02842 Published 2020-04-01 No fix listed CWE-1236

TI-2020-05478 CVE-2020-6753 · GHSA-3w4w-m332-9cfq

LOW 30

The Login by Auth0 plugin before 4.0.0 for WordPress allows stored XSS on multiple pages, a different issue than CVE-2020-5392.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01318 Published 2020-04-01 No fix listed CWE-79

TI-2019-14548 CVE-2019-20173

LOW 32

The Auth0 wp-auth0 plugin 3.11.x before 3.11.3 for WordPress allows XSS via a wle parameter associated with wp-login.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02462 Published 2020-02-05 No fix listed CWE-79