AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

OktaOKTA-1GOPXBX

Improper File Type Handling in Bulk User Import in Auth0 Wordpress plugin

Okta

CVE-2025-58769 · Published Oct 1, 2025

Low3.3
No fix yet
Okta advisory

In applications built with the Auth0-PHP SDK, the Bulk User Import endpoint does not validate the file path wrapper or value. To remediate, upgrade Auth0 Wordpress plugin to version 5.4.0 or greater.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.

Changes since it was listed

SeverityOct 12Severity: Unrated to Low
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N
Severity from
NVD

More Okta advisories

All Okta
High 8.4Dec 10, 2025Race condition in the Okta Java SDKCVE-2025-67505no fix yetMedium 5.3Dec 10, 2025Improper Memory Cleanup in the Okta Java SDKCVE-2025-66033no fix yetMedium 5.4Dec 10, 2025Improper Request Caching Lookup in the Auth0 Next.js SDKCVE-2025-67490no fix yetMedium 5.7Dec 10, 2025Improper Validation of Query Parameters in Auth0 Next.js SDKCVE-2025-67716no fix yetHigh 7.5Dec 4, 2025Improper HMAC Signature Verification in auth0/node-jwsCVE-2025-65945no fix yetMedium 6.8Jul 22, 2025Okta On-Premises Provisioning (OPP) Password Reset Information DisclosureCVE-2025-7371no fix yet