Medium severity · published Sep 26, 2025
CVE-2025-10752
OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Cross-Site Request Forgery
4.3
CVSS
0.2%
EPSS
No
On KEV
Description
The OAuth Single Sign On – SSO (OAuth Client) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.26.12. This is due to using a predictable state parameter (base64 encoded app name) without any randomness in the OAuth flow. This makes it possible for unauthenticated attackers to forge OAuth authorization requests and potentially hijack the OAuth flow via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
None
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 6% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OS
OAuth Single Sign On – SSO (OAuth Client) · cyberlord92
through 6.26.12 · source: vendor
Affected product
OS
OAuth Single Sign On – SSO (OAuth Client)
cyberlord92
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-10752
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-10752
plugins.trac.wordpress.org
https://plugins.trac.wordpress.org/browser/miniorange-login-with-eve-online-google-facebook/tags/6.26.12/class-mooauth-widget.php#L285
plugins.trac.wordpress.org
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3360768%40miniorange-login-with-eve-online-google-facebook&new=3360768%40miniorange-login-with-eve-online-google-facebook&sfp_email=&sfph_mail=
www.wordfence.com
https://www.wordfence.com/threat-intel/vulnerabilities/id/e8d7e8f3-e8ff-460f-a343-807bcdb865dc?source=cve
More from OAuth Single Sign On – SSO (OAuth Client)
9.8
CVE-2025-9485
OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token()
8.1
CVE-2024-10111
OAuth Single Sign On – SSO (OAuth Client) <= 6.26.3 - Authentication Bypass
5.3
CVE-2025-10753
OAuth Single Sign On – SSO (OAuth Client) <= 6.26.14 - Missing Authorization