Vulnerabilities

TI-2025-41710 CVE-2025-68129 · GHSA-j2vm-wrq3-f7gf

Auth0-PHP SDK has Improper Audience Validation

LOW 35

Auth0-PHP is a PHP SDK for Auth0 Authentication and Management APIs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00425 Published 2025-12-17 Fixed in 8.18.0 CWE-863

TI-2020-04438 CVE-2020-5391 · GHSA-4r6x-5qgj-3h44

MEDIUM 40

Cross-site request forgery (CSRF) vulnerabilities exist in the Auth0 plugin before 4.0.0 for WordPress via the domain field.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00845 Published 2020-04-01 No fix listed CWE-352

TI-2020-04439 CVE-2020-5392 · GHSA-rj4p-pf74-jqc3

LOW 30

A stored cross-site scripting (XSS) vulnerability exists in the Auth0 plugin before 4.0.0 for WordPress via the settings page.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01318 Published 2020-04-01 No fix listed CWE-79