OpenID Connect Generic Client

Explore OpenID Connect Generic Client vulnerabilities across all versions. Currently tracking 2 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSMedium

6.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all OpenID Connect Generic Client vulnerabilities before they are exploited.

Vulnerability Records

2 records


2025-12-17 00:00	OpenID Connect Generic Client <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode OpenID Connect Generic Client <= 3.10.0	`CVE-2025-13730`	6.4 Medium	Muhammad Yudha - DJ	Yes
2021-04-07 00:00	OpenID Connect Generic Client 3.8.0-3.8.1 - Reflected Cross-Site Scripting OpenID Connect Generic Client 3.8.0 – < 3.8.2	`CVE-2021-24214`	6.1 Medium	Austin Bentley	Yes

Showing 1–2 of 2 reports

Plugin Profile

Latestv3.11.3

OpenID Connect Generic Client

Author

Jonathan Daggerhart

5.0(20)

100/100

Last Updated

2026-02-13 (6mo ago)

Active Installs

10,000+

Downloads

204,836

Requires WP

5.0+

Requires PHP

7.4+

Tested up to

WP 6.9.0

Created

2018-02-25 (9y ago)

This plugin allows to authenticate users against OpenID Connect OAuth2 API with Authorization Code Flow. Once installed, it can be configured to automatically authenticate users (SSO), or provide a “Login with OpenID Connect” button on the login form. After consent has been obtained, an existing user is automatically logged into WordPress, while new users are created in WordPress database. Much of the documentation can be found on the Settings > OpenID Connect Generic dashboard page. Please submit issues to the Github repo: https://github.com/oidc-wp/openid-connect-generic

View on WordPress.org