OAuth Single Sign On vulnerabilities
We track 1 vulnerability in OAuth Single Sign On products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 2, 2026.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest OAuth Single Sign On vulnerabilities
- 8.1 High severity
OAuth Single Sign On: Improper Authentication
The OAuth Single Sign On WordPress plugin before 7.0.1 does not verify the identity assertion returned by its Steam single sign-on flow, allowing unauthenticated attackers to log in as an arbitrary non-administrator user, and to create new accounts.