Skip to main content

Login By Auth0

3 CVEs product

Monthly

CVE-2020-7948 Apr 01, 13:15 HIGH This Week

An issue was discovered in the Login by Auth0 plugin before 4.0.0 for WordPress. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Information Disclosure Wordpress Plugin Auth0 Login By Auth0
NVD GitHub
CVSS 3.1
8.8
EPSS
2.2%
CVE-2020-7947 Apr 01, 13:15 CRITICAL Act Now

An issue was discovered in the Login by Auth0 plugin before 4.0.0 for WordPress. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Code Injection Wordpress Plugin Auth0 Login By Auth0
NVD GitHub
CVSS 3.1
9.8
EPSS
2.8%
CVE-2020-6753 Apr 01, 13:15 MEDIUM This Month

The Login by Auth0 plugin before 4.0.0 for WordPress allows stored XSS on multiple pages, a different issue than CVE-2020-5392. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress XSS Auth0 Login By Auth0
NVD GitHub
CVSS 3.1
6.1
EPSS
1.3%
EPSS 2% CVSS 8.8
HIGH This Week

An issue was discovered in the Login by Auth0 plugin before 4.0.0 for WordPress. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Information Disclosure Wordpress Plugin +2
NVD GitHub
EPSS 3% CVSS 9.8
CRITICAL Act Now

An issue was discovered in the Login by Auth0 plugin before 4.0.0 for WordPress. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Code Injection Wordpress Plugin +2
NVD GitHub
EPSS 1% CVSS 6.1
MEDIUM This Month

The Login by Auth0 plugin before 4.0.0 for WordPress allows stored XSS on multiple pages, a different issue than CVE-2020-5392. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress XSS Auth0 +1
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy