MEDIUM6.8Packagist
GHSA-vvg7-8rmq-92g7Auth0 WordPress has Improper Audience Validation via Auth0-PHP SDK Dependency
Modified: 2/4/2026
package
Packagist/auth0/wordpress
pkg:packagist/auth0/wordpress
CRITICAL9.1Packagist
GHSA-2f4r-34m4-3w8qAuth0 Wordpress plugin Vulnerable to Brute Force Authentication Tags of CookieStore Sessions
Modified: 2/4/2026
CRITICALPackagist
GHSA-862m-5253-832rAuth0 Wordpress Plugin vulnerable to Deserialization of Untrusted Data
Modified: 2/4/2026
HIGH8.2Packagist
GHSA-vfpx-q664-h93mAuth0 WordPress Plugin has Insufficient Entropy in Cookie Encryption
Modified: 4/3/2026
MEDIUM6.1Packagist
GHSA-x6p7-44rh-m3rr· CVE-2023-6813Login by Auth0 plugin for WordPress vulnerable to Reflected Cross-Site Scripting
Modified: 7/11/2024