Skip to content
Sign in
6.5 Medium

CVE-2023-1093 The OAuth Single Sign On WordPress plugin before 6.24.2 does not have CSRF checks when discarding Identify providers…

Description

The OAuth Single Sign On WordPress plugin before 6.24.2 does not have CSRF checks when discarding Identify providers (IdP), which could allow attackers to make logged in admins delete all IdP via a CSRF attack

Affected products and versions

Product Affected versions Fixed in
OAuth Single Sign On 6.24 earliest → < 6.24.2 6.24.2

Other CVEs of OAuth Single Sign On

The 2 CVEs of OAuth Single Sign On →
CVE-2026-82183 The OAuth Single Sign On WordPress plugin before 7.0.1 does not verify the identity assertion returned by its Steam… 8.1 High
Track this CVE