OS
Product
Oauth Single Sign ON
4
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 3Low 0
Watch
Add Oauth Single Sign ON to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-34155 | 8.8 | Jul 18 | Improper Authentication vulnerability in miniOrange OAuth Single Sign On – SSO (OAuth Client) plugin allows Authentication Bypass.This issue affects OAuth Single Sign On – SSO… Affected: before 6.23.4 |
| CVE-2023-1093 | 6.5 | Mar 27 | The OAuth Single Sign On WordPress plugin before 6.24.2 does not have CSRF checks when discarding Identify providers (IdP), which could allow attackers to make logged in admins… Affected: before 6.24.2 |
| CVE-2023-1092 | 6.5 | Mar 27 | The OAuth Single Sign On Free WordPress plugin before 6.24.2, OAuth Single Sign On Standard WordPress plugin before 28.4.9, OAuth Single Sign On Premium WordPress plugin before… Affected: before 6.24.2; before 28.4.9; before 38.4.9; before 48.4.9 |
| CVE-2022-2133 | 5.3 | Jul 17 | The OAuth Single Sign On WordPress plugin before 6.22.6 doesn't validate that OAuth access token requests are legitimate, which allows attackers to log onto the site with the only… Affected: before 6.22.6 |
Showing 4