Executive brief
Login by Auth0 plugin for WordPress vulnerable to Reflected Cross-Site Scripting
Affected products
- Packagist auth0/wordpress
Junglewise Threat Intelligence
CVE-2023-6813: Login by Auth0 plugin for WordPress vulnerable to Reflected Cross-Site Scripting
CVE-2023-6813 · Severity: low · CVSS 3.1 · Published 2024-07-11
Technologies: auth0/wordpress (Packagist). Vendors: Packagist.
Related threats
- Auth0 WordPress Plugin has Insufficient Entropy in Cookie Encryption
- Auth0 WordPress has Improper Audience Validation via Auth0-PHP SDK Dependency
- Auth0 Wordpress Plugin vulnerable to Deserialization of Untrusted Data
- Auth0 Wordpress plugin Vulnerable to Brute Force Authentication Tags of CookieStore Sessions
- Duplicate Advisory: Login by Auth0 plugin for WordPress vulnerable to Reflected Cross-Site Scripting