Read the docs

Oauth Client Single Sign On Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Oauth Client Single Sign On Project records in CISA KEV

No Oauth Client Single Sign On Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Oauth Client Single Sign On 1 record HIGH

Records

1 record

TI-2022-02878 CVE-2022-3119 · GHSA-wh77-xq95-gvgr

OAuth client Single Sign On for WordPress < 3.0.4 - Unauthenticated Settings Update to Authentication Bypass

Priority HIGH 66

The OAuth client Single Sign On WordPress plugin before 3.0.4 does not have authorisation and CSRF when updating its settings, which could allow unauthenticated attackers to update them and change the OAuth endpoints to…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00443 Published 2022-09-26 Fixed in 3.0.4 CWE-287
Open these records in search →