OktaOKTA-0FOYKBJ
Okta On-Premises Provisioning (OPP) Password Reset Information Disclosure CVE-2025-7371...
UnratedCVE-2025-7371 · Published Jul 22, 2025
The Auth0 Wordpress plugin contains a critical vulnerability due to insecure deserialization of cookie data. Upgrade the Auth0 WordPress plugin to version 5.3.0.
Affected versions
The source does not list versions here. See the source advisory for affected products and fixes.
Details and references
More Okta advisories
All Okta| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Oct 12025 | Improper File Type Handling in Bulk User Import in Auth0 Wordpress plugin CVE-2025-58769... | Unrated | No fix yet |
| Jun 32025 | CDN Caching of Session Cookies in NextJS-Auth0 SDK CVE-2025-48947 - Jun 3, 2025 | Unrated | No fix yet |
| Jun 32025 | Deserialization of Untrusted Data in Auth0-PHP SDK CVE-2025-48951 - Jun 3, 2025 | Unrated | No fix yet |
| May 152025 | Brute Force Authentication Tags of CookieStore Sessions in Auth0-PHP SDK CVE-2025-47275... | Unrated | No fix yet |
| May 62025 | SAML Attribute Smuggling Vulnerability Allowing User Impersonation in Passport-WS-Fed... | Unrated | No fix yet |
| May 62025 | SAML Signature Wrapping Vulnerability Leading to User Impersonation in Passport-WS-Fed... | Unrated | No fix yet |