Description
The wpo365-login plugin before v11.7 for WordPress allows use of a symmetric algorithm to decrypt a JWT token. This leads to authentication bypass.
Unscored
CVE-2020-26511
EUVD-2020-19058GHSA-28p2-p7pc-m535
The wpo365-login plugin before v11.7 for WordPress allows use of a symmetric algorithm to decrypt a JWT token. This leads to authentication…
Published Oct 2, 2020 · Updated Aug 4, 2024 · Assigned by mitre