CVE-2022-34839
MEDIUMCodexShaper WP OAuth2 Server <= 1.0.1 - Authentication Bypass
Title source: llmDescription
Authentication Bypass vulnerability in CodexShaper's WP OAuth2 Server plugin <= 1.0.1 at WordPress.
References (2)
Core 2
Core References
Third Party Advisory x_refsource_confirm
https://wordpress.org/plugins/oauth2-server/#description
Third Party Advisory x_refsource_confirm
https://patchstack.com/database/vulnerability/oauth2-server/wordpress-wp-oauth2-server-plugin-1-0-1-authentication-bypass-vulnerability
Scores
CVSS v3
5.9
EPSS
0.0086
EPSS Percentile
53.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-287
Status
published
Products (2)
CodexShaper/WP OAuth2 Server (WordPress plugin)
<= 1.0.1 - 1.0.1
codexshaper/wp_oauth2_server
< 1.0.1
Published
Jul 22, 2022
Tracked Since
Feb 18, 2026