Showing 4 vulnerabilities on this page for OAuth Single Sign On – SSO (OAuth Client)

Signals CISA KEV Ransomware Nuclei
cyberlord92 vulnerability results
VulnerabilityTitle and contextCVSSEPSSPoCsSignalsSTIX action

OAuth Single Sign On – SSO (OAuth Client) <= 6.26.14 - Missing Authorization

The OAuth Single Sign On – SSO (OAuth Client) plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 6.26.14. This is due to missing capability checks and authentication verification on the OAuth redirect functionality accessible via the 'oauthredirect' option parameter. This makes it possible for unauthenticated attackers to set the global redirect URL option via the redirect_url parameter granted they can access the site directly.

CWE-862Feb 6, 2026
CVSS5.3v3.1EPSS0.334%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token()

The OAuth Single Sign On – SSO (OAuth Client) plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in versions up to, and including, 6.26.12. This is due to the plugin performing unsafe JWT token processing without verification or validation in the `get_resource_owner_from_id_token` function. This makes it possible for unauthenticated attackers to bypass authentication and gain access to any existing user account - including administrators in certain configurati

CWE-347Oct 4, 2025
CVSS9.8v3.1EPSS0.563%PoCs1SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Cross-Site Request Forgery

The OAuth Single Sign On – SSO (OAuth Client) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.26.12. This is due to using a predictable state parameter (base64 encoded app name) without any randomness in the OAuth flow. This makes it possible for unauthenticated attackers to forge OAuth authorization requests and potentially hijack the OAuth flow via a forged request granted they can trick a site administrator into performing an action suc

CWE-352Sep 26, 2025
CVSS4.3v3.1EPSS0.155%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

OAuth Single Sign On – SSO (OAuth Client) <= 6.26.3 - Authentication Bypass

The OAuth Single Sign On – SSO (OAuth Client) plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 6.26.3. This is due to insufficient verification on the user being returned by the social login token. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the username and the user does not have an already-existing account for the service returning the token.

CWE-287Dec 12, 2024
CVSS8.1v3.1EPSS0.759%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX