Plugin icon

IndieAuth

indieauth

Vulnerabilities:

1

Last Updated:

October 25, 2025

Active Installs:

400

Published
Title
Fixed in
CVSS
Published
2025-10-23
Title
IndieAuth < 4.5.5 - Cross-Site Request Forgery to Account Takeover via Stolen OAuth Tokens
Fixed in
Fixed in 4.5.5
CVSS
8.8 (high)