CVE-2022-2133 | BDVDB-2026-180280 Detail

OAuth Single Sign On – SSO (OAuth Client)

Description#

The OAuth Single Sign On WordPress plugin before 6.22.6 doesn't validate that OAuth access token requests are legitimate, which allows attackers to log onto the site with the only knowledge of a user's email address.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-287 Improper Authentication

References#

https://wpscan.com/vulnerability/e76939ca-180f-4472-a26a-e0c36cfd32de

Exploit#

No public exploit known

History#

Version 12022-07-17Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.