Simple Sign On Project vulnerabilities
We track 1 vulnerability in Simple Sign On Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 5, 2022.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Simple Sign On Project vulnerabilities
- 7.5 High severity
Simple Single Sign On: Cleartext Transmission of Sensitive Information
The Simple Single Sign On WordPress plugin through 4.1.0 leaks its OAuth client_secret, which could be used by attackers to gain unauthorized access to the site.