Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Miniorange Subscribe
Filtered by product Oauth Single Sign On
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-2133 1 Miniorange 1 Oauth Single Sign On 2022-07-18 5.0 MEDIUM 5.3 MEDIUM
The OAuth Single Sign On WordPress plugin before 6.22.6 doesn't validate that OAuth access token requests are legitimate, which allows attackers to log onto the site with the only knowledge of a user's email address.