CVE-2022-34839 WordPress WP OAuth2 Server plugin <= 1.0.1 - Authentication Bypass vulnerability
An authentication bypass in the WP OAuth2 Server plugin allows attackers to gain unauthorized access to WordPress accounts.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-34839?
CVE-2022-34839 is a medium-severity authentication bypass vulnerability in CodexShaper WP OAuth2 Server (WordPress plugin), published on 22 Jul 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Authentication Bypass vulnerability in CodexShaper's WP OAuth2 Server plugin <= 1.0.1 at WordPress.
Weakness: CWE-287
Which versions are affected by CVE-2022-34839?
It affects 1 product.
Products include Codexshaper Wp Oauth2 Server.
How do I fix CVE-2022-34839?
No fix has been published for CVE-2022-34839 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2022-34839 being exploited?
There is no known exploitation of CVE-2022-34839 in the wild and no public exploit code.
Sources
Also known as GHSA-qgmh-3vp9-q7p2.