CVE-2022-3632

6.5 mediumEPSS 0.4%

Medium (6.5) in digitialpixies oauth client. EPSS 0.4% chance of exploitation in the next 30 days.

The OAuth Client by DigitialPixies WordPress plugin through 1.1.0 does not have CSRF checks in some places, which could allow attackers to make logged-in users perform unwanted actions.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2022-11-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

digitialpixies:oauth_client

References

https://wpscan.com/vulnerability/4c1b0e5e-245a-4d1f-a561-e91af906e62d
https://wpscan.com/vulnerability/4c1b0e5e-245a-4d1f-a561-e91af906e62d

Check your stack JSON