plugin

Single Sign On Client Vulnerabilities

1 known security issue reported for the Single Sign On Client WordPress plugin. Most recent disclosed Jun 4, 2022.

1 high

Running Single Sign On Client on your site? Check whether your installed version is affected.

Simple Single Sign On <= 4.1.1 - Insecure OAuth Implementation to Authentication Bypass

high

The Simple Single Sign On plugin for WordPress is vulnerable to authorization bypass due to insecurely configured OAuth in versions up to, and including, 4.1.1 which allows attackers to retrieve client access_tokens that can be used to authenticate to a vulnerable site. This makes it possible unauthenticated attackers...

CVSS:: 8.1
Affected:: up to 4.1.1
Fix:: No patched version reported
Disclosed:: Jun 4, 2022

CVE-2022-2083 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database