CVE-2022-34155CWE-287

WordPress OAuth Single Sign On – SSO (OAuth Client) Plugin <= 6.23.3 is vulnerable to Broken Authentication

High · published July 18, 2023

CVSS v3.1
8.8
EPSS
1%
Percentile
61.1
In the wild
Unconfirmed
What it is

Improper Authentication vulnerability in miniOrange OAuth Single Sign On – SSO (OAuth Client) plugin allows Authentication Bypass.This issue affects OAuth Single Sign On – SSO (OAuth Client): from n/a through 6.23.3.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00958 · 61.1th percentile
Weakness
CWE-287 · Improper Authentication
Published
2023-07-18T13:41Z
EPSS history
Timeline
  • 18 JUL 13:41Z
    WordPress OAuth Single Sign On – SSO (OAuth Client) Plugin <= 6.23.3 is vulnerable to Broken Authentication
    cvelistv5