← CVE Intelligence

CVE-2022-3926

WP OAuth Server < 3.4.2 - Client Secret Regeneration via CSRF PUBLISHED

Description (CNA)

The WP OAuth Server (OAuth Authentication) WordPress plugin before 3.4.2 does not have CSRF check when regenerating secrets, which could allow attackers to make logged in admins regenerate the secret of an arbitrary client given they know the client ID

Affected (CNA)

Vendor / productVersions
Unknown / WP OAuth Server (OAuth Authentication)affected 0 before 3.4.2

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.