Known vulnerabilities in Login by Auth0
Vendor:
auth0 on WordPress
Software:
Login by Auth0
Software CPE:
cpe:2.3:a:auth0_on_wordpress:auth0:*:*:*:*:*:wordpress:*:*
Total vulnerabilities:
6
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU26601 - Improper Access Control CVE-2020-7948 |
CWE-284 | Medium | 4.0.0 | 06.04.2020 |
SB2020040607 |
||
| #VU26600 - Improper Control of Generation of Code ('Code Injection') CVE-2020-7947 |
CWE-94 | Low | 4.0.0 | 06.04.2020 |
SB2020040607 |
||
| #VU26599 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-6753 |
CWE-79 | Low | 4.0.0 | 06.04.2020 |
SB2020040607 |
||
| #VU26598 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-5392 |
CWE-79 | Low | 4.0.0 | 06.04.2020 |
SB2020040607 |
||
| #VU26597 - Cross-Site Request Forgery (CSRF) CVE-2020-5391 |
CWE-352 | Low | 4.0.0 | 06.04.2020 |
SB2020040607 |
||
| #VU25001 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-20173 |
CWE-79 | Low | 3.11.3 | 06.02.2020 |
SB2020020603 |