WP OAuth Server < 4.3.0 – Subscriber+ Arbitrary Client Deletion
Discription
The plugin has a flawed CSRF and authorisation check when deleting a client, which could allow any authenticated users, such as subscriber to delete arbitrary client.Read More
References
Back to Main
