PatchTheCVEapi bearer auth vulnerabilities and fixes
Recent CVEs affecting api bearer auth, with upgrade or downgrade steps. 1 tracked.
Also searched as: apibearerauth.
api bearer auth has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2019-09-15. Highest priority: CVE-2019-16332 (score 50/100).
- CVE-2019-16332 MEDIUM 6.1 UPGRADE In the api-bearer-auth plugin before 20190907 for WordPress, the server parameter is not correctly filtered in
FAQ
How do I fix api bearer auth vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is api bearer auth being exploited right now?
None of the tracked api bearer auth CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which api bearer auth CVE should I patch first?
CVE-2019-16332 currently ranks highest (50/100): In the api-bearer-auth plugin before 20190907 for WordPress, the server parameter is not correctly filtered in.