An issue was discovered in the Login by Auth0 plugin before 4.0.0 for WordPress. A user can perform an insecure direct object reference.

Published Apr 1, 2020 · Updated Aug 4, 2024 · Assigned by mitre