CVE-2022-2133CWE-287

OAuth Single Sign On < 6.22.6 - Authentication Bypass

published July 17, 2022

CVSS
—
EPSS
1%
Percentile
68.3
In the wild
Unconfirmed
What it is

The OAuth Single Sign On WordPress plugin before 6.22.6 doesn't validate that OAuth access token requests are legitimate, which allows attackers to log onto the site with the only knowledge of a user's email address.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01213 · 68.3th percentile
Weakness
CWE-287 · Improper Authentication
Published
2022-07-17T10:36Z
EPSS history
Timeline
  • 17 JUL 10:36Z
    OAuth Single Sign On < 6.22.6 - Authentication Bypass
    cvelistv5