Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Digitialpixies Clear all filters
TI-2022-03342 CVE-2022-3632 · GHSA-44q8-q54p-39fv

OAuth Client by DigitialPixies <= 1.1.0 - CSRF

Priority MEDIUM 62

The OAuth Client by DigitialPixies WordPress plugin through 1.1.0 does not have CSRF checks in some places, which could allow attackers to make logged-in users perform unwanted actions.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00373 Published 2022-11-14 No fix listed CWE-352
TI-2022-03341 CVE-2022-3631 · GHSA-9h87-xh4m-v7fp

OAuth Client by DigitialPixies <= 1.1.0 - Admin+ Stored Cross-Site Scripting

Priority MEDIUM 55

The OAuth Client by DigitialPixies WordPress plugin through 1.1.0 does not sanitize and escapes some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks ev…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00549 Published 2022-11-14 No fix listed CWE-79