Packagist/auth0/wordpress — 4 CVEs

CRITICAL9.1CVE-2025-47275Brute Force Authentication Tags of CookieStore Sessions in Auth0-PHP SDK

from 0, < 5.3.0

MEDIUM6.8CVE-2025-68129Auth0 WordPress has Improper Audience Validation via Auth0-PHP SDK Dependency

>= 5.0.0-BETA0, < 5.5.0

MEDIUM6.1CVE-2023-6813Login by Auth0 plugin for WordPress vulnerable to Reflected Cross-Site Scripting

from 0, < 4.6.1

—Auth0-PHP SDK Deserialization of Untrusted Data vulnerability

>= 5.0.0-BETA0, < 5.1.0

pkg:Packagist/auth0/wordpress