Lucene search
WpvulndbWPVDB-ID:D8B092E6-35AB-4B91-82BA-C5760E0D69B3HistoryJul 20, 2023 - 12:00 a.m.
OAuth Single Sign On – SSO (OAuth Client) < 6.23.4 - Improper Authentication
2023-07-2000:00:00
wpscan.com
4
oauth
single sign on
ajax actions
unauthorized actions
low role users
Description The plugin does not have authorisation in various AJAX actions, which could allow users with a role as low as Subscriber to call them and perform unauthorised actions
| CPE | Name | Operator | Version |
|---|---|---|---|
| miniorange-login-with-eve-online-google-facebook | eq | 6.23.4 |
Related
nvd
nvd
CVE-2022-34155
2023-07-18 14:15:12
prion
prion
Authentication flaw
2023-07-18 14:15:00
cvelist
cvelist
cve
cve
CVE-2022-34155
2023-07-18 14:15:12
wordfence
wordfence
8.6 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
23.0%
Related for WPVDB-ID:D8B092E6-35AB-4B91-82BA-C5760E0D69B3