CVE-2022-2133CWE-287

CVE-2022-2133: vulnerability in OAuth Single Sign On – SSO (OAuth Client)

OAuth Single Sign On < 6.22.6 - Authentication Bypass

Published · Updated

Follow this CVE+ Monitor OAuth Single Sign On – SSO

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.2%
The OAuth Single Sign On WordPress plugin before 6.22.6 doesn't validate that OAuth access token requests are legitimate, which allows attackers to log onto the site with the only knowledge of a user's email address.
Affected products
Unknown · OAuth Single Sign On – SSO (OAuth Client)