Plugin icon

WP OAuth Server (OAuth Authentication)

oauth2-provider

Vulnerabilities:

6

Last Updated:

January 24, 2026

Active Installs:

3000

Published
Title
Fixed in
CVSS
Published
2024-04-05
Title
OAuth Server < 4.4.0 - Open Redirect
Fixed in
Fixed in 4.4.0
CVSS
5.4 (medium)
Published
2023-02-21
Title
WP OAuth Server < 4.2.5 - Arbitrary Post Deletion via CSRF
Fixed in
Fixed in 4.2.5
CVSS
6.5 (medium)
Published
2023-02-21
Title
WP OAuth Server < 4.3.0 - Subscriber+ Arbitrary Client Deletion
Fixed in
Fixed in 4.3.0
CVSS
4.3 (medium)
Published
2022-11-10
Title
WP OAuth Server < 3.4.2 - Client Secret Regeneration via CSRF
Fixed in
Fixed in 3.4.2
CVSS
4.3 (medium)
Published
2022-11-08
Title
WP OAuth Server < 4.2.2 - Admin+ Stored XSS
Fixed in
Fixed in 4.2.2
CVSS
3.4 (low)
Published
2015-08-12
Title
WP OAuth Server <= 3.1.4 - Insecure Pseudor&om Number Generation
Fixed in
Fixed in 3.1.5
CVSS
9.8 (critical)