AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

OktaOKTA-0FOYKBJ

Okta On-Premises Provisioning (OPP) Password Reset Information Disclosure

Okta

CVE-2025-7371 · Published Jul 22, 2025

Medium6.8
No fix yet
Okta advisory

The Auth0 Wordpress plugin contains a critical vulnerability due to insecure deserialization of cookie data. Upgrade the Auth0 WordPress plugin to version 5.3.0.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.

Changes since it was listed

SeverityOct 12Severity: Unrated to Medium
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Severity from
NVD

More Okta advisories

All Okta
Low 3.3Oct 1, 2025Improper File Type Handling in Bulk User Import in Auth0 Wordpress pluginCVE-2025-58769no fix yetHigh 7.7Jun 3, 2025CDN Caching of Session Cookies in NextJS-Auth0 SDKCVE-2025-48947no fix yetCritical 9.3Jun 3, 2025Deserialization of Untrusted Data in Auth0-PHP SDKCVE-2025-48951no fix yetCritical 9.1May 15, 2025Brute Force Authentication Tags of CookieStore Sessions in Auth0-PHP SDKCVE-2025-47275no fix yetHigh 8.6May 6, 2025SAML Attribute Smuggling Vulnerability Allowing User Impersonation in Passport-WS-FedCVE-2025-46573no fix yetCritical 9.3May 6, 2025SAML Signature Wrapping Vulnerability Leading to User Impersonation in Passport-WS-FedCVE-2025-46572no fix yet