Vendor/product archive

auth0 / wp-auth0 CVEs

Beta · best-effort

3 CVEs tagged to auth0 / wp-auth0 — 0 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to auth0 vendor archive

CVE-2025-68129

Published Dec 17, 2025

Auth0-PHP is a PHP SDK for Auth0 Authentication and Management APIs. In applications built with the Auth0-PHP SDK, the audience validation in access tokens is performed improperly…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2020-5392

Published Apr 1, 2020

A stored cross-site scripting (XSS) vulnerability exists in the Auth0 plugin before 4.0.0 for WordPress via the settings page.

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2020-5391

Published Apr 1, 2020

Cross-site request forgery (CSRF) vulnerabilities exist in the Auth0 plugin before 4.0.0 for WordPress via the domain field.

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1