OAuth Single Sign On – SSO (OAuth Client) by miniOrange <= 6.22.5 - Auth Bypass
REPORT ID: 21a45363-8b09-4da1-ae17-6f4458a1ad19
The plugin contains an Auth Bypass vulnerability. To bypass authentication, the attacker only needs to know the user's email address. Depending on the obtained email address, the attacker may even get an administrator role on the client's website.
You need to log in to view the vulnerability details.
Attributes
- Catgory
- WordPress Plugin
- Vulnerability Discovered
- 2022-06-12
- Report Published
- 2022-06-20
- Affected Version
- <= 6.22.5
Classification
- Type
- Authentication Bypass
Support Us?
We would truly appreciate it if you bought us a bunny (food for a snow leopard).
