Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2022-3632

OAuth Client by DigitialPixies <= 1.1.0 - CSRF

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The OAuth Client by DigitialPixies WordPress plugin through 1.1.0 does not have CSRF checks in some places, which could allow attackers to make logged-in users perform unwanted actions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown OAuth Client by DigitialPixies

  • 1.1.0 to ≤ 1.1.0affected

References