Wp Auth0

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-5392 MEDIUM This Month

A stored cross-site scripting (XSS) vulnerability exists in the Auth0 plugin before 4.0.0 for WordPress via the settings page. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS WordPress Wp Auth0

NVD GitHub

CVSS 3.1

6.1

EPSS

1.3%

CVE-2020-5391 HIGH This Week

Cross-site request forgery (CSRF) vulnerabilities exist in the Auth0 plugin before 4.0.0 for WordPress via the domain field. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Wp Auth0

NVD GitHub

CVSS 3.1

8.8

EPSS

0.8%

CVE-2020-5392

EPSS 1% CVSS 6.1

MEDIUM This Month

XSS WordPress Wp Auth0

NVD GitHub

CVE-2020-5391

EPSS 1% CVSS 8.8

HIGH This Week

WordPress CSRF Wp Auth0

NVD GitHub