WP OAuth Server (OAuth Authentication), CVE-2022-3926

CVE, Research URL: CVE-2022-3926
Home page URL: Security reports for WP OAuth Server (OAuth Authentication)
Application: WP OAuth Server (OAuth Authentication)
Published on: Dec 05, 2022
Research Description: The WP OAuth Server (OAuth Authentication) WordPress plugin before 3.4.2 does not have CSRF check when regenerating secrets, which could allow attackers to make logged in admins regenerate the secret of an arbitrary client given they know the client ID
Affected versions: Min -, max 4.2.2.
Status: vulnerable