CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2324 matches found

Vulnrichment•added 2025/10/04 2:24 a.m.•7 views

CVE-2025-9485 OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token()

The OAuth Single Sign On – SSO OAuth Client plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in versions up to, and including, 6.26.12. This is due to the plugin performing unsafe JWT token processing without verification or validation in the...

9.8CVSS6.1AI score0.00563EPSS

SaveExploits1References3

Positive Technologies•added 2025/10/04 12:00 a.m.•13 views

PT-2025-40621

Name of the Vulnerable Software and Affected Versions OAuth Single Sign On – SSO OAuth Client plugin for WordPress versions up to and including 6.26.12 Description The OAuth Single Sign On – SSO OAuth Client plugin for WordPress is susceptible to improper verification of cryptographic signatures...

9.8CVSS6.4AI score0.00563EPSS

SaveExploits1References11

CNNVD•added 2025/10/04 12:00 a.m.•8 views

WordPress plugin OAuth Single Sign On – SSO (OAuth Client) 数据伪造问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A data forgery issue...

9.8CVSS6.6AI score0.00563EPSS

SaveExploits1References3

Patchstack•added 2025/10/03 11:50 p.m.•10 views

WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token() vulnerability

Authentication Bypass via getresourceownerfromidtoken vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin OAuth Single Sign On – SSO OAuth Client versions = 6.26.12...

9.8CVSS6.7AI score0.00563EPSS

SaveExploits1References1Affected Software1