All 4 CVE vulnerabilities found in Authorizer, with AI-generated Chinese analysis, references, and POCs.
Vendor: Paul Ryan
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-123196 | Authorizer before 2.4.2 Password Reset Poisoning via x-authorizer-url gRPC metadata CWE-640 | 8.1 | High | 2026-11-05 |
| CVE-2026-103752 | WordPress Authorizer plugin <= 3.15.3 - Privilege Escalation vulnerability CWE-266 | 9.8 | Critical | 2026-10-01 |
| CVE-2026-54072 | Authorizer: Unvalidated redirect_uri in /authorize leaks OAuth2 tokens to attacker-controlled URL CWE-601 | 9.3 | Critical | 2026-09-11 |
| CVE-2026-81294 | WordPress Authorizer plugin <= 3.15.1 - Privilege Escalation vulnerability CWE-266 | 9.8 | Critical | 2026-09-02 |
All 4 known CVE vulnerabilities affecting Authorizer with full Chinese analysis, references, and POCs where available.