← CVE Intelligence

CVE-2022-4148

WP OAuth Server < 4.3.0 - Subscriber+ Arbitrary Client Deletion PUBLISHED

Description (CNA)

The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.3.0 has a flawed CSRF and authorisation check when deleting a client, which could allow any authenticated users, such as subscriber to delete arbitrary client.

Affected (CNA)

Vendor / productVersions
Unknown / WP OAuth Server (OAuth Authentication)affected 0 before 4.3.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.