Skip to content
OpenAdvisories

Vendor

hectavex

1 known vulnerabilities.

Products

WP-OAuth 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2025-12021

    WP-OAuth <= 0.4.1 - Reflected Cross-Site Scripting

    The WP-OAuth plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'error_description' parameter in all versions up to, and including, 0.4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthen…

    hectavex WP-OAuth Web / CMS