Medium · 4.7 CVE-2024-31253 EUVD-2024-29149GHSA-rrpg-fwx7-jf88

WordPress WP OAuth Server (OAuth Authentication) plugin <= 4.3.3 - Open Redirection vulnerability

Published Apr 10, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: WP OAuth Server Product: OAuth Server

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in WP OAuth Server OAuth Server.This issue affects OAuth Server: from n/a through 4.3.3.

Affected products

Vendor	Product	Affected	Fixed
WP OAuth Server	OAuth Server	≤ 4.3.3	—

References

https://patchstack.com/database/vulnerability/oauth2-provider/wordpress-wp-oauth-server-oauth-authentication-plugin-4-3-3-open-redirection-vulnerability?_s_id=cve vdb-entry