Auth0 / WP-Auth0

3 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2025-68129	Auth0-PHP SDK has Improper Audience Validation	HIGH	7.5	Dec 17, 2025
CVE-2020-5391	Cross-site request forgery (CSRF) vulnerabilities exist in the Auth0 plugin before 4.0.0 for WordPress via the domain field.	HIGH	8.8	Apr 1, 2020
CVE-2020-5392	A stored cross-site scripting (XSS) vulnerability exists in the Auth0 plugin before 4.0.0 for WordPress via the settings page.	MEDIUM	6.1	Apr 1, 2020

Rows per page

Showing 1 to 3 of 3 CVEs