Lucene search
Philip ÅkessonWPVDB-ID:C0433E94-3BCC-438A-9369-2607AEC8B067HistoryOct 02, 2020 - 12:00 a.m.
WordPress + Microsoft Office 365 < 11.7 - JWT Signature Verification Bypass
2020-10-0200:00:00
Philip Åkesson
wpscan.com
11
wordpress microsoft office 365 jwt signatures verification bypass authentication authorization_attackers tokens forged_connections_security vulnerability
.
EPSS
0.002
Percentile
53.4%
The plugin does not correctly verify JWT signatures, allowing attackers to forge tokens and bypass authentication and authorisation checks.
References
Related
cvelist
cvelist
CVE-2020-26511
2020-10-02 04:04:01
patchstack
patchstack
prion
prion
Authentication flaw
2020-10-02 05:15:00
cve
cve
CVE-2020-26511
2020-10-02 05:15:12
nvd
nvd
CVE-2020-26511
2020-10-02 05:15:12