CVE-2022-3632CWE-352

OAuth Client by DigitialPixies <= 1.1.0 - CSRF

Medium · published November 14, 2022

CVSS v3.1
6.5
EPSS
0%
Percentile
30.1
In the wild
Unconfirmed
What it is

The OAuth Client by DigitialPixies WordPress plugin through 1.1.0 does not have CSRF checks in some places, which could allow attackers to make logged-in users perform unwanted actions.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00373 · 30.1th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2022-11-14T00:00Z
EPSS history
Timeline
  • 14 NOV 00:00Z
    OAuth Client by DigitialPixies <= 1.1.0 - CSRF
    cvelistv5