Miniorange Oauth Single Sign On
4 CVEs affecting Miniorange Oauth Single Sign On. Latest disclosed: 2023-07-18. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-34155 | High | 8.8 | 2023-07-18 | Improper Authentication vulnerability in miniOrange OAuth Single Sign On – SSO (OAuth Client) plugin allows Authentication Bypass.This issue affects OAuth Sing… |
CVE-2023-1093 | Medium | 6.5 | 2023-03-27 | The OAuth Single Sign On WordPress plugin before 6.24.2 does not have CSRF checks when discarding Identify providers (IdP), which could allow attackers to make… |
CVE-2023-1092 | Medium | 6.5 | 2023-03-27 | The OAuth Single Sign On Free WordPress plugin before 6.24.2, OAuth Single Sign On Standard WordPress plugin before 28.4.9, OAuth Single Sign On Premium WordPr… |
CVE-2022-2133 | Medium | 5.3 | 2022-07-17 | The OAuth Single Sign On WordPress plugin before 6.22.6 doesn't validate that OAuth access token requests are legitimate, which allows attackers to log onto th… |