Oauth Client Single Sign On Project vulnerabilities
We track 1 vulnerability in Oauth Client Single Sign On Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 26, 2022.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Oauth Client Single Sign On Project vulnerabilities
- 7.5 High severity
OAuth client Single Sign On for WordPress (…: Improper Authentication
The OAuth client Single Sign On WordPress plugin before 3.0.4 does not have authorisation and CSRF when updating its settings, which could allow unauthenticated attackers to update them and change the OAuth endpoints to ones they controls, allowing them to the