Simple Sign On vulnerabilities
1 known vulnerability in Simple Sign On from Simple Sign On Project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest first
- 7.5 High severity
Simple Single Sign On: Cleartext Transmission of Sensitive Information
The Simple Single Sign On WordPress plugin through 4.1.0 leaks its OAuth client_secret, which could be used by attackers to gain unauthorized access to the site.