title: WordPress WP OAuth2 Server plugin <= 1.0.1 - Authentication Bypass vulnerability
description: Authentication Bypass vulnerability in CodexShaper's WP OAuth2 Server plugin <= 1.0.1 at WordPress.
problem types: Bypass
affected:
{
product: WP OAuth2 Server (WordPress plugin)
vendor: CodexShaper
versions:
lessThanOrEqual: 1.0.1, status: affected, version: <= 1.0.1, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.9
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
]