5246 matches found
CVE-2022-34149
Authentication Bypass vulnerability in miniOrange WP OAuth Server plugin = 3.0.4 at WordPress...
CVE-2022-34149
Authentication Bypass vulnerability in miniOrange WP OAuth Server plugin = 3.0.4 at WordPress...
Authentication flaw
Authentication Bypass vulnerability in miniOrange WP OAuth Server plugin = 3.0.4 at WordPress...
Authentication flaw
Authentication Bypass vulnerability in miniOrange OAuth 2.0 client for SSO plugin = 1.11.3 at WordPress...
CVE-2022-34149 WordPress WP OAuth Server plugin <= 3.0.4 - Authentication Bypass vulnerability
Authentication Bypass vulnerability in miniOrange WP OAuth Server plugin = 3.0.4 at WordPress...
CVE-2022-34149
CVE-2022-34149 : Authentication bypass in the WordPress plugin miniOrange WP OAuth Server for versions
CVE-2022-34149 WordPress WP OAuth Server plugin <= 3.0.4 - Authentication Bypass vulnerability
Authentication Bypass vulnerability in miniOrange WP OAuth Server plugin = 3.0.4 at WordPress...
CVE-2022-34858 WordPress OAuth 2.0 client for SSO plugin <= 1.11.3 - Authentication Bypass vulnerability
Authentication Bypass vulnerability in miniOrange OAuth 2.0 client for SSO plugin = 1.11.3 at WordPress...
CVE-2022-34858 WordPress OAuth 2.0 client for SSO plugin <= 1.11.3 - Authentication Bypass vulnerability
Authentication Bypass vulnerability in miniOrange OAuth 2.0 client for SSO plugin = 1.11.3 at WordPress...
CVE-2022-34858
CVE-2022-34858 affects the miniOrange OAuth 2.0 client for SSO WordPress plugin (
WordPress plugin WP OAuth Server 权限许可和访问控制问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin WP OAuth...
PT-2022-22398 · Miniorange · Miniorange Oauth 2.0 Client For Sso Plugin
Name of the Vulnerable Software and Affected Versions: miniOrange OAuth 2.0 client for SSO plugin versions = 1.11.3 Description: The issue is related to an Authentication Bypass vulnerability. It affects the miniOrange OAuth 2.0 client for SSO plugin at WordPress. Recommendations: For versions =...
PT-2022-22022 · WordPress · Miniorange Wp Oauth Server
Name of the Vulnerable Software and Affected Versions: miniOrange WP OAuth Server plugin versions = 3.0.4 Description: The issue is related to an Authentication Bypass vulnerability. It affects the miniOrange WP OAuth Server plugin at WordPress. Recommendations: For versions = 3.0.4, update to a...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.9.45 bug fix and security update
Red Hat OpenShift Container Platform release 4.9.45 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.9. Red Hat Product Security has rated this update as having a...
Simple Single Sign On <= 4.1.0 - Authentication Bypass
The plugin leaks its OAuth clientsecret, which could be used by attackers to gain unauthorized access to the site. PoC When we click the "Single Sign On" button, the plugin redirects us to the OAuth server to authenticate ourselves if we are not logged in. The button invokes the following URL:...
Simple Single Sign On <= 4.1.0 - Authentication Bypass
The plugin leaks its OAuth clientsecret, which could be used by attackers to gain unauthorized access to the site. When we click the "Single Sign On" button, the plugin redirects us to the OAuth server to authenticate ourselves if we are not logged in. The button invokes the following URL:...
next-auth before v4.10.2 and v3.29.9 leaks excessive information into log
Impact An information disclosure vulnerability in next-auth before v4.10.2 and v3.29.9 allows an attacker with log access privilege to obtain excessive information such as an identity provider's secret in the log which is thrown during OAuth error handling and use it to leverage further attacks o...
GHSA-CC8C-26RJ-V2VX administrate vulnerable to Cross-Site Request Forgery
Cross-site request forgery CSRF vulnerability in administrate 0.1.4 and earlier allows remote attackers to hijack the user's OAuth autorization code...
administrate vulnerable to Cross-Site Request Forgery
Cross-site request forgery CSRF vulnerability in administrate 0.1.4 and earlier allows remote attackers to hijack the user's OAuth autorization code...