Dash10 Oauth Server — known CVE vulnerabilities

Every CVE whose affected-product data names Dash10 Oauth Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2015-9435 — CVSS 9.8 (critical): The oauth2-provider plugin before 3.1.5 for WordPress has incorrect generation of random numbers.
• CVE-2022-3894 — CVSS 4.3 (medium): The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.2.5 does not have CSRF check when deleting a client, and does not…
• CVE-2022-4148 — CVSS 4.3 (medium): The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.3.0 has a flawed CSRF and authorisation check when deleting a client…