Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: Oauth Client Single Sign On Project Component: Oauth Client Single Sign On Clear all filters
TI-2022-02878 CVE-2022-3119 · GHSA-wh77-xq95-gvgr

OAuth client Single Sign On for WordPress < 3.0.4 - Unauthenticated Settings Update to Authentication Bypass

Priority HIGH 66

The OAuth client Single Sign On WordPress plugin before 3.0.4 does not have authorisation and CSRF when updating its settings, which could allow unauthenticated attackers to update them and change the OAuth endpoints to…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00443 Published 2022-09-26 Fixed in 3.0.4 CWE-287