What’s Vulnerable › Products

axton WP-WebAuthn vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your axton WP-WebAuthn version is affected

Latest axton WP-WebAuthn vulnerabilities

• CVE-2025-13910 — WP-WebAuthn <= 1.3.4 - Unauthenticated Stored Cross-Site Scripting (CVSS 6.1)
• CVE-2024-47650 — WordPress WP-WebAuthn plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2024-9023 — WP-WebAuthn <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wwa_login_form Shortcode (CVSS 5.4)