← Back

Api Bearer Auth

api_bearer_auth

Vendor: Api Bearer Auth Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-16332
1Api Bearer Auth Project
1Api Bearer Auth
Jun 17, 2026
Sep 15, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
In the api-bearer-auth plugin before 20190907 for WordPress, the server parameter is not correctly filtered in the swagger-config.yaml.php file, and it is possible to inject JavaScript code, aka XSS.