← All advisories

Medium severity6.1NVD Advisory· Published Feb 5, 2020· Updated Jun 17, 2026

CVE-2019-20173

CVE-2019-20173

Description

The Auth0 wp-auth0 plugin 3.11.x before 3.11.3 for WordPress allows XSS via a wle parameter associated with wp-login.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/Auth0llm-create
Range: <3.11.3
Auth0/wp-auth0llm-fuzzy
Range: <3.11.3

Patches

Vulnerability mechanics

References

3

auth0.com/docs/security/bulletins/cve-2019-20173nvdVendor Advisory
github.com/auth0/wp-auth0/releases/tag/3.11.3nvdRelease NotesThird Party Advisory
wpvulndb.com/vulnerabilities/10059nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.