CVE-2022-2133

The OAuth Single Sign On WordPress plugin before 6.22.6 doesn't validate that OAuth access token requests are legitimate, which allows attackers to log onto the site with the only knowledge of a user's email address...

CVE-2022-2133

The OAuth Single Sign On WordPress plugin before 6.22.6 doesn't validate that OAuth access token requests are legitimate, which allows attackers to log onto the site with the only knowledge of a user's email address...

CVE-2022-2133

The CVE-2022-2133 entry concerns the WordPress OAuth Single Sign On – SSO (OAuth Client) plugin. Affected versions are prior to 6.22.6, where the plugin does not validate that OAuth access token requests are legitimate. This failure enables an attacker to log into a site using only knowledge of a...

CVE-2022-2133 OAuth Single Sign On < 6.22.6 - Authentication Bypass

The OAuth Single Sign On WordPress plugin before 6.22.6 doesn't validate that OAuth access token requests are legitimate, which allows attackers to log onto the site with the only knowledge of a user's email address...