← All advisories

Medium severity6.1NVD Advisory· Published Apr 1, 2020· Updated Jun 17, 2026

CVE-2020-5392

CVE-2020-5392

Description

A stored cross-site scripting (XSS) vulnerability exists in the Auth0 plugin before 4.0.0 for WordPress via the settings page.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Auth0/wp-auth02 versions
cpe:2.3:a:auth0:wp-auth0:*:*:*:*:*:wordpress:*:*+ 1 more
- cpe:2.3:a:auth0:wp-auth0:*:*:*:*:*:wordpress:*:*range: <4.0.0
- (no CPE)range: <4.0.0
WordPress/Auth0description
WordPress/Auth0llm-fuzzy
Range: <4.0.0

Patches

Vulnerability mechanics

References

3

auth0.com/docs/security/bulletins/2020-03-31_wpauth0nvdThird Party Advisory
github.com/auth0/wp-auth0/releasesnvdRelease NotesThird Party Advisory
github.com/auth0/wp-auth0/security/advisories/GHSA-59vf-cgfw-6h6vnvdThird Party Advisory

News mentions

0

No linked articles in our index yet.