auth0/wordpress
The release includes detailed upgrade notes, a substantial README, and organization-backed security and build practices. Its beta status, three months without recorded commits, and one unpinned workflow action warrant pinning and careful upgrade testing.
68%
Total Score
75
93
83
Health Score Breakdown
No commits or active maintainers were recorded in the last three months, which weakens evidence of ongoing maintenance even though the repository was recently pushed and releases continue.
This release is explicitly a beta, which adds compatibility uncertainty, although prereleases represent only 5% of recent releases and the major version is established.
The audit analyzed all one workflow with no reported findings or untrusted checkout and script-injection issues. However, its only action reference is unpinned, leaving avoidable dependency-integrity exposure.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2023-6813 auth0/wordpress is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 4.6.0. | 0.0.0 - 4.6.0 | Medium |
Package versions
Maintainers
 Auth0 |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/cache Version ^3.0 | — | — |
nyholm/psr7 Version ^1 | — | — |
auth0/auth0-php Version ^9.0@beta | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.