Exploitation Summary
EIP tracks 2 public exploits for CVE-2025-9485. PoCs published by ItsSunshineXD, jFriedli.
AI-analyzed exploit summary The repository contains only a minimal README with no exploit code, technical details, or functional PoC. It is a placeholder with no substantive content.
Description
The OAuth Single Sign On – SSO (OAuth Client) plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in versions up to, and including, 6.26.12. This is due to the plugin performing unsafe JWT token processing without verification or validation in the `get_resource_owner_from_id_token` function. This makes it possible for unauthenticated attackers to bypass authentication and gain access to any existing user account - including administrators in certain configurations - or to create arbitrary subscriber-level accounts.
Exploits (2)
The repository contains only a minimal README with no exploit code, technical details, or functional PoC. It is a placeholder with no substantive content.
This repository provides a functional proof-of-concept for CVE-2025-9485, demonstrating an authentication bypass via unsigned JWT tokens. The exploit forges a JWT with 'alg: none' and injects it into an authentication callback to gain unauthorized access.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H