PatchTheCVEopenid connect generic client vulnerabilities and fixes
Recent CVEs affecting openid connect generic client, with upgrade or downgrade steps. 1 tracked.
Also searched as: openidconnectgenericclient.
openid connect generic client has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-05-06. Highest priority: CVE-2021-24214 (score 45/100).
- CVE-2021-24214 MEDIUM 6.1 DOWNGRADE The OpenID Connect Generic Client WordPress plugin 3.8.0 and 3.8.1 did not sanitise the login error when outpu
FAQ
How do I fix openid connect generic client vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is openid connect generic client being exploited right now?
None of the tracked openid connect generic client CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which openid connect generic client CVE should I patch first?
CVE-2021-24214 currently ranks highest (45/100): The OpenID Connect Generic Client WordPress plugin 3.8.0 and 3.8.1 did not sanitise the login error when outpu.