Wp Auth0

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-5392 Apr 01, 13:15 MEDIUM This Month

A stored cross-site scripting (XSS) vulnerability exists in the Auth0 plugin before 4.0.0 for WordPress via the settings page. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress XSS Auth0 Wp Auth0

NVD GitHub

CVSS 3.1

6.1

EPSS

1.3%

CVE-2020-5391 Apr 01, 13:15 HIGH This Week

Cross-site request forgery (CSRF) vulnerabilities exist in the Auth0 plugin before 4.0.0 for WordPress via the domain field. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Auth0 Wp Auth0

NVD GitHub

CVSS 3.1

8.8

EPSS

0.8%

CVE-2020-5392

EPSS 1% CVSS 6.1

MEDIUM This Month

WordPress XSS Auth0 +1

NVD GitHub

CVE-2020-5391

EPSS 1% CVSS 8.8

HIGH This Week

WordPress CSRF Auth0 +1

NVD GitHub