← All advisories

Critical severity9.8NVD Advisory· Published Sep 26, 2019· Updated Jun 17, 2026

CVE-2015-9435

CVE-2015-9435

Description

The oauth2-provider plugin before 3.1.5 for WordPress has incorrect generation of random numbers.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

WordPress/oauth2-providerdescription
Dash10/OAuth Server
cpe:2.3:a:dash10:oauth_server:*:*:*:*:*:wordpress:*:*
Range: <3.1.5
WordPress/oauth2-providerllm-fuzzy
Range: <3.1.5

Patches

Vulnerability mechanics

References

2

security.dxw.com/advisories/the-oauth2-complete-plugin-for-wordpress-uses-a-pseudorandom-number-generator-which-is-non-cryptographically-secure/nvdThird Party Advisory
wordpress.org/plugins/oauth2-provider/nvdProductVendor Advisory

News mentions

0

No linked articles in our index yet.